[Pdns-users] Recursor - resolving local internal IPs?

[Charles Sprickman]

Very odd..

So I see I needed "recurse: false":

  forward_zones:
  - zone: 88.99.10.in-addr.arpa
    recurse: false
    forwarders:
    - 10.99.88.247
    - 10.99.88.250

But also to keep it from locking up I had to remove "serve_rfc1918: true" which seems odd.

Anyhow, seems to be working now.

Thanks,

Charles

> On Sep 21, 2025, at 10:58 PM, Charles Sprickman via Pdns-users <pdns-users at mailman.powerdns.com> wrote:
> 
> Hi all,
> 
> I know this is basic, but working on a small site where we just have two PDNS auth servers and two recursors, all on different hosts/jails and I want to be able to resolve a reverse/in-addr.arpa subnet.
> 
> At first I thought I was just shooting myself in the foot with a bad "dont_query" line, so I reduced that to just this:
> 
> outgoing:
>   dont_query:
>   - 127.0.0.0/8
> 
> also made sure rfc1918 is allowed:
> 
> serve_rfc1918: true (in the recursor section)
> 
> Then I looked at my old pre-YAML configs from a very, very dated version we were running, and realized that the recursor just didn't know to look locally to resolve "10.99.88.0/24".
> 
> So I added this:
> 
> recursor:
>  forward_zones:
>    - zone: 88.99.10.in-addr.arpa
>      forwarders:
>      - 10.99.88.247
>      - 10.99.88.250
> 
> I confirmed I have those IPs correct and that they answer for 10.99.88.0/24. When I add this stanza, powerdns starts, doesn't log anything and is then unkillable with anything other than a "kill -9". What am I missing here?
> 
> This is recursor version 5.2.4 talking to auth server 4.9.1 on FreeBSD 13.4.
> 
> Thanks,
> 
> Charles
> _______________________________________________
> Pdns-users mailing list
> Pdns-users at mailman.powerdns.com
> https://mailman.powerdns.com/mailman/listinfo/pdns-users