Public bug reported: We are using ubuntu 16.04 as our dns recursoron production. We installed the pdns-recursor package from ubuntu repositories, pdns-recursor (4.0.0~alpha2-2ubuntu0.1) and we faced an issue that is really similar to this one: https://github.com/PowerDNS/pdns/pull/4377.
Here it is the version installed: ``` # pdns_recursor --version Aug 30 06:39:50 PowerDNS Recursor 4.0.0-alpha2 (C) 2001-2016 PowerDNS.COM BV Aug 30 06:39:50 Using 64-bits mode. Built using gcc 5.4.0 20160609. Aug 30 06:39:50 PowerDNS comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2. Aug 30 06:39:50 Features: openssl lua Aug 30 06:39:50 Configured with: " '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include' '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--disable-silent-rules' '--libdir=${prefix}/lib/x86_64-linux-gnu' '--libexecdir=${prefix}/lib/x86_64-linux-gnu' '--disable-maintainer-mode' '--disable-dependency-tracking' '--sysconfdir=/etc/powerdns' '--enable-reproducible' '--with-lua' 'build_alias=x86_64-linux-gnu' 'CFLAGS=-g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security' 'LDFLAGS=-Wl,-Bsymbolic-functions -fPIE -pie -Wl,-z,relro -Wl,-z,now -latomic' 'CPPFLAGS=-Wdate-time -D_FORTIFY_SOURCE=2' 'CXXFLAGS=-g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security -DPACKAGEVERSION='\''"4.0.0~alpha2-2ubuntu0.1.Ubuntu"'\'''" ``` And here is the output of a dig request: ``` ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 16855 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;<Some server internaly>. IN A ;; Query time: 654 msec ;; SERVER: 10.176.228.2#53(10.176.228.2) ;; WHEN: Fri Aug 30 08:13:13 CEST 2019 ;; MSG SIZE rcvd: 68 ``` Without changing anything to the configuration, we installed the upstream 4.0.X series version. Here you find the output of the version number, and the same dig request as above: ```# pdns_recursor --version Aug 30 07:03:37 PowerDNS Recursor 4.0.9 (C) 2001-2017 PowerDNS.COM BV Aug 30 07:03:37 Using 64-bits mode. Built using gcc 5.4.0 20160609 on Nov 6 2018 16:30:52 by root@505b66e59573. Aug 30 07:03:37 PowerDNS comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2. Aug 30 07:03:37 Features: openssl lua Aug 30 07:03:37 Configured with: " '--host=' '--build=' '--prefix=/usr' '--sysconfdir=/etc/powerdns' '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' '--libdir=${prefix}/lib/' '--libexecdir=${prefix}/lib' '--with-lua' '--with-protobuf=yes' '--enable-systemd' '--with-systemd=/lib/systemd/system' 'build_alias=' 'host_alias=' 'CFLAGS=-g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security' 'LDFLAGS=-Wl,-Bsymbolic-functions -fPIE -pie -Wl,-z,relro -Wl,-z,now' 'CPPFLAGS=-Wdate-time -D_FORTIFY_SOURCE=2' 'CXXFLAGS=-g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security'" ``` ``` ; <<>> DiG 9.10.3-P4-Ubuntu <<>> @10.176.228.2 storage-dc1r03n12.fuel.eu-zrh.hub.k.grp ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50592 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;<Some server internaly>. IN A ;; ANSWER SECTION: <Some server internaly>. 0 IN A 10.X.X.X ;; Query time: 164 msec ;; SERVER: 10.176.228.2#53(10.176.228.2) ;; WHEN: Fri Aug 30 08:53:48 CEST 2019 ;; MSG SIZE rcvd: 84 ``` Please backport bugfix for pdns_recursor, or update the distributed package to the last 4.0.X version. Version of ubuntu: # cat /etc/os-release NAME="Ubuntu" VERSION="16.04.5 LTS (Xenial Xerus)" ID=ubuntu ID_LIKE=debian PRETTY_NAME="Ubuntu 16.04.5 LTS" VERSION_ID="16.04" HOME_URL="http://www.ubuntu.com/" SUPPORT_URL="http://help.ubuntu.com/" BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/" VERSION_CODENAME=xenial UBUNTU_CODENAME=xenial Regards, Luis Domingues ** Affects: pdns-recursor (Ubuntu) Importance: Undecided Status: New ** Tags: xenial -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1842034 Title: pdns-recursor: make the record cache forward-aware To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/pdns-recursor/+bug/1842034/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs