[Pdns-users] recursor - exclude single zone from forwarding

Vitali Quiering vitali at quiering.com
Mon Sep 30 13:19:19 UTC 2019


Hello,

is it possible to exclude zones from forwarding?

In plain bind config you could just leave forwarders empty to overwrite the forwarders config for just one domain.

From my “recursor-beginners-point-of-view" something like this could work, but it obviously doesn’t.

forward-zones=.=8.8.8.8,example.com=,example.org=8.8.4.4

Unfortunately I can’t get no records from example.com <http://example.com/> zone.

> $ dig @ns01.domain.local example.net ns
> 
> ; <<>> DiG 9.15.0 <<>> @ns01.domain.local example.net ns
> ; (1 server found)
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30890
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
> 
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ;; QUESTION SECTION:
> ;example.net.			IN	NS
> 
> ;; ANSWER SECTION:
> example.net.		4430	IN	NS	b.iana-servers.net.
> example.net.		4430	IN	NS	a.iana-servers.net.
> 
> ;; Query time: 24 msec
> ;; SERVER: 10.10.10.2#53(10.10.10.2)
> ;; WHEN: Mo Sep 30 15:11:49 CEST 2019
> ;; MSG SIZE  rcvd: 85

> $ dig @ns01.domain.local example.org ns
> 
> ; <<>> DiG 9.15.0 <<>> @ns01.domain.local example.org ns
> ; (1 server found)
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24688
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
> 
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ;; QUESTION SECTION:
> ;example.org.			IN	NS
> 
> ;; ANSWER SECTION:
> example.org.		15027	IN	NS	b.iana-servers.net.
> example.org.		15027	IN	NS	a.iana-servers.net.
> 
> ;; Query time: 24 msec
> ;; SERVER: 10.10.10.2#53(10.10.10.2)
> ;; WHEN: Mo Sep 30 15:11:54 CEST 2019
> ;; MSG SIZE  rcvd: 88

> $ dig @ns01.domain.local example.com ns
> 
> ; <<>> DiG 9.15.0 <<>> @ns01.domain.local example.com ns
> ; (1 server found)
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33091
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
> 
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ;; QUESTION SECTION:
> ;example.com.			IN	NS
> 
> ;; Query time: 24 msec
> ;; SERVER: 10.10.10.2#53(10.10.10.2)
> ;; WHEN: Mo Sep 30 15:11:56 CEST 2019
> ;; MSG SIZE  rcvd: 40

Regards,
Vitali
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20190930/3a3ef07b/attachment.htm>


More information about the Pdns-users mailing list