[Pdns-users] dnsdist drops packet

2015-12-18 Thread Federico Olivieri
Hi all, I have a raspberry that is running dnsdist with this configuration: newServer{address="192.168.0.3:53"} newServer{address="127.0.0.1:5300", pool="abuse"} addPoolRule({"wpad.domain.name"}, "abuse") webserver("192.168.0.2:8083", "supersecret") addACL("0.0.0.0/0") addACL("::/0")

Re: [Pdns-users] -Is it po-ssible to block all ANY queries?

2015-12-18 Thread Federico Olivieri
Hi Josh, The README it is everything that I have used so far https://github.com/PowerDNS/pdns/blob/master/pdns/README-dnsdist.md for a easy load balancing you can do it *dnsdist my.first.server.here my.second.server.here --daemon* Federico 2015-12-18 2:53 GMT+00:00 Josh Sanders

[Pdns-users] Feature request: disable-any-meta-query-type

2015-12-18 Thread Josh Sanders
Hello, I really like PowerDNS but I would like to have a setting disable-any-meta-query-type=yes in pdns.conf and answer with HINFO "Any Queries are not allowed Sorry" or no answer at all. More info: https://blog.cloudflare.com/deprecating-dns-any-meta-query-type/ The reason for this is

Re: [Pdns-users] Feature request: disable-any-meta-query-type

2015-12-18 Thread Josh Sanders
Aki, Thanks for your reply, I have been working with PowerDNS for a few weeks so far. Currently I am trying Federico Olivieri's iptables rules based on hex-string ANY. On the other hand ... for stopping those ones ... zone: mydomain.com Remote xxx.xxx.xxx.xxx wants 'domainA.com|ANY', do = 0,

Re: [Pdns-users] Feature request: disable-any-meta-query-type

2015-12-18 Thread bert hubert
On Fri, Dec 18, 2015 at 02:50:22PM -0600, Josh Sanders wrote: > Remote xxx.xxx.xxx.www wants 'domainD.com|ANY', do = 0, bufsize = 1680: > packetcache MISS > > As you may see, 'any-to-tcp=yes' seems to be not working so far ... Can you tcpdump? They could simply be sking the question, doesn't

Re: [Pdns-users] Feature request: disable-any-meta-query-typ-e

2015-12-18 Thread Josh Sanders
Thanks for your reply Bert, I am trying the iptables rules for stopping "questions" -m string --hex-string "|ff0001|" and not allowing to overload my small DNSs. On Fri, Dec 18, 2015 at 3:01 PM, bert hubert wrote: > On Fri, Dec 18, 2015 at 02:50:22PM -0600,