[Pdns-users] questions of understanding pdns-recursor with hosts-file

[Markus Ehrlicher]

Hello Otto,

thanks for looking into this case. I thought, it could be the same behavior like "normal" hosts-files on clients/servers.
But no big deal, because you named good alternatives. Lua seems a little to complicated for me without prior knowledge from my side. I tried a rpz-Zone-file and everything works as expected, so this should be the fastest solution - thanks :)
One little question to rpz-files: is it legit to put more TLDs into this file or should I make separate files? Actually, I have more TLDs into this file and no problems, but I don't know, if this is to "dirty" ;)

Thanks and best regards,
Markus


-----Ursprüngliche Nachricht-----
Von: Otto Moerbeek <otto at drijf.net> 
Gesendet: Mittwoch, 9. September 2020 11:46
An: Markus Ehrlicher <Markus.Ehrlicher at komsa.de>; 'pdns-users at mailman.powerdns.com' <pdns-users at mailman.powerdns.com>
Betreff: Re: [Pdns-users] questions of understanding pdns-recursor with hosts-file

On Tue, Sep 08, 2020 at 08:23:27AM +0200, Otto Moerbeek via Pdns-users wrote:

> On Tue, Sep 08, 2020 at 06:05:40AM +0000, Markus Ehrlicher via Pdns-users wrote:
> 
> > Hello together,
> > 
> > can anyone reproduce this problem or should I open a ticket on github?
> 
> I wanted to look into this, but I did not have time yet. Without 
> looking at the code but knowing some details of the auth zone 
> mechanism, I'm not surprised by what you are seeing.

Confirmed (the docs should be more explicit about this though).

I would suggest you look into Lua or RPZ zones. For Lua, see https://docs.powerdns.com/recursor/lua-scripting/index.html

With RPZ zones you can specify alternative replies based on the qname (but not the qtype) and they do not have the effect of covering everything below a qname.

	-Otto