[Pdns-users] PDNS Recursor and forward-zones-file

Brian Candler b.candler at pobox.com
Thu Mar 17 15:38:48 UTC 2022


On 17/03/2022 15:26, Pepe Charli wrote:
>      In the traces only the domain has been changed to test.com 
> <http://test.com>
>      192.168.68.63 and 192.168.68.64 are autoritatives for this domain.
>      Both resolver and authoritative are only used internally with 
> private IPs

Are 192.168.68.63/64 authoritative-only servers (like pdns auth), or 
mixed recursor+authoritative (like bind)?

If they are authoritative-only, this implies the recursor can never 
resolve a public DNS name. In that case, the recursor seems to serve 
little purpose: you could point the clients directly at the 
authoritatives, or use dnsdist to forward the queries.

If they are mixed, and you want to be able to resolve names in the 
public DNS, then you will need "+." in your forward-zones-file in the 
pdns recursor.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20220317/9b195c30/attachment.htm>


More information about the Pdns-users mailing list