search for: powerdn

PowerDNS supports CAA records beginning with version 4.0, but the pdns package in EPEL for most recent centos versions is stuck at around version 3.4 (3.4.11 is what I have). Do I have no other choice but to manually compile and maintain my own pdns installation? I prefer to avoid this but I need up-to...

Hi Everyone, I am trying to build the PowerDNS rpm from the source rpms powerdns-2.9.20-3.MIND.src.rpm, it requires opendbx-devel which I am trying to build from the instructions at (http://www.linuxnetworks.de/opendbx/download/index.html) I have subscribe to centosplus for packages like mysql5 and php5. I have the following MySQL packages in...

Hello, while investigating a report from Jan-Piet Mens (resulting in http://wiki.powerdns.com/trac/changeset/3109), we discovered that NSD (both 3.2.15 and 4.0.0b4) compresses labels in RP content. As far as I can see, this is not allowed by RFC3597 section 4 paragraph 1/2. PowerDNS Recursor, like Unbound and BIND, now deals with this as 3597 section 4 paragraph 4 says we SHOULD. Neve...

...dir="ltr"> <div dir="ltr"> <div dir="ltr"> <div dir="ltr"> We have dovecot-1:2.3.3-1.fc29.x86_64 running on Fedora 29. I'd like to test wforce, from <a href="https://github.com/PowerDNS/weakforced">https://github.com/PowerDNS/weakforced</a>. <br> </div> <div dir="ltr"> <br> </div> <div> I see instructions at the Authentication policy support page,...

Hi everyone, How does one go about putting a request for getting a package included in centosplus? We are heavy users the product PowerDNS and are keen to see that be included in the centosplus repository, so it can be compiled against other recent packages like MySQL5 etc. Any pointers will be helpful -- "I never look back darling, it distracts from the now", Edna Mode (The Incredibles)

Hi Christof! AFAIK, PowerDNS is the only open source name server that supports ALIAS. There was an idea to standardize ALIAS as "ANAME" (https://datatracker.ietf.org/doc/draft-ietf-dnsop-aname/), but the idea was dropped in favor of SVCB/HTTPS record https://datatracker.ietf.org/doc/rfc9460/. So now we have to wait...

...eouts before querying another server.? Then you just run 2 or more servers to use for forwarding.? Use forward-only to force all local servers to use only forwarding (for security and caching reasons).? Much simpler than using keepalived.? In recent years I *have not had any* problems with bind9 or powerdns crashing. As far as using the ISC server vs powerdns, you may want to check on peoples recent experiences.? There was a time when many thought powerdns had much better performance and fewer security issues.? For various reasons? I've seen some people including myself, switch back to ISC bind9...

--On Friday, December 08, 2017 7:54 PM +0000 MRob <mrobti at insiberia.net> wrote: > PowerDNS supports CAA records beginning with version 4.0, but the pdns > package in EPEL for most recent centos versions is stuck at around > version 3.4 (3.4.11 is what I have). > > Do I have no other choice but to manually compile and maintain my own > pdns installation? I prefer to avoid...

...er use cases where ALIAS/ANAME would be ideal, notably in apex RRs. So while fostering SVCB/HTTPS deployment is a good thing, I wouldn?t mind name server software implementing ALIAS. Including NSD, but I reckon it?s much more challenging to do due to NSD architecture than it was to implement it in PowerDNS. But if NSD developers some day feel bored, perhaps implementing ALIAS would solve that ? ;-) Rubens > Em 11 de jan. de 2024, ?(s) 07:49, Klaus Darilion via nsd-users <nsd-users at lists.nlnetlabs.nl> escreveu: > > Hi Christof! > > AFAIK, PowerDNS is the only open sou...

wforce is the username always. auth_policy_hash_nonce should be set to a pseudorandom value that is shared by your server(s). Weakforced does not need it for anything. auth_policy_server_api_header should be set to Authorization: Basic <echo -n wforce:our_password | base64> without the < >. Aki On 6.3.2019 20.42, Robert Kudyba via dovecot wrote: > I took suggestions

Hello! Does nsd support ALIAS records or is there a plan to support it somewhen in the future? I didn't find anything about this topic in conjunction with nsd. Afaik there is no RFC for it and I guess therefore nsd does not support it. PowerDNS does for example: https://doc.powerdns.com/authoritative/guides/alias.html Br, Christof -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20240110/29dd2e26/attachment.htm>

We have dovecot-1:2.3.3-1.fc29.x86_64 running on Fedora 29. I'd like to test wforce, from https://github.com/PowerDNS/weakforced. I see instructions at the Authentication policy support page, https://wiki2.dovecot.org/Authentication/Policy I see the Required Minimum Configuration: auth_policy_server_url = http://example.com:4001/ auth_policy_hash_nonce = localized_random_string But when I search for these dire...

Hi, I just tried to build using http://dl.fedoraproject.org/pub/epel/6/SRPMS/pdns-3.1-2.el6.src.rpm on CentOS 6.4 final (kernel: 2.6.32-358.2.1.el6.x86_64), but it failed when looking for ldap libs: Note: I did not change anything in the original spec file. ... + ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu --target=x86_64-redhat-linux-gnu

[offtopic] btw, is there something wrong with the domain? i couldn''t reach the site, my browser said the hostname lartc.org (or www.lartc.org) doesn''t exist, i had to dig up the ip address through whois, lookups and stuff. [/offtopic]

Hi, I am trying to compile an application (PowerDNS) with PostgreSQL support. Where do the PowerDNS libraries get installed under CentOS? I am constantly getting the error checking for PgSQL library directory... configure: error: Didn't find the pgsql library dir in '/usr/include/lib/pgsql /usr/include/pgsql /usr/include' -- "I...

...g another server.? Then you just run 2 or more servers to use for > forwarding.? Use forward-only to force all local servers to use only > forwarding (for security and caching reasons).? Much simpler than using > keepalived.? In recent years I *have not had any* problems with bind9 or > powerdns crashing. > > As far as using the ISC server vs powerdns, you may want to check on > peoples recent experiences.? There was a time when many thought powerdns > had much better performance and fewer security issues.? For various > reasons? I've seen some people including myself,...

...olution may work if traffic is expensive and limited but we're heading in the other direction: you can rent a server for 50 bucks with 1gbit bandwidth and unmetered traffic e.g. at hetzner.de <http://hetzner.de/> Maybe you want to look into a solution like weakforced: https://github.com/PowerDNS/weakforced <https://github.com/PowerDNS/weakforced> Wforce is a project by Dovecot, PowerDNS and Open-Xchange Best regards Gerald > > > > > > > -----Original Message----- > From: Odhiambo Washington > Sent: donderdag 11 april 2019 12:28 > To: Marc Ro...

...e instead forwarded Samba to the old Unbound DNS servers for internet DNS. There are various poblems with this setup, namely that Samba doesn't support "conditional forwarders" [2] so we handle that in Unbound. Is the right answer (still) to set up separate DNS servers (like BIND or PowerDNS) and forward the AD zone to Samba? What about dynamic DNS for non-domain-joined DHCP clients? Their names can't be trusted in the same zone as the AD domain, so I want the DHCP server to register them somewhere else. Can Samba DNS handle that zone or should that be handled by BIND/PowerDNS?...

...warder anyway so as not to leak information to the internet-only VLANs. It would be an improvement in several ways and give better reliability. It doesn't really help those clients I can not run name servers on, though. > In recent years I *have not had any* problems with bind9 or > powerdns crashing. > > As far as using the ISC server vs powerdns, you may want to check on > peoples recent experiences.? There was a time when many thought powerdns > had much better performance and fewer security issues.? For various > reasons? I've seen some people including myself,...

Hello, given the 2015 revision date, I was curious if anyone can confirm https://wiki2.dovecot.org/Timeouts is still accurate where the 'before login' IMAP timeout remains hard coded? We're having an issue where blocks of IP's from China and similar locations are crawling IP ranges trying common login credentials, and hanging the connections open in the process. We have clients