Public bug reported:

We are using ubuntu 16.04 as our dns recursoron production. We installed
the pdns-recursor package from ubuntu repositories, pdns-recursor
(4.0.0~alpha2-2ubuntu0.1) and we faced an issue that is really similar
to this one: https://github.com/PowerDNS/pdns/pull/4377.

Here it is the version installed:
```
# pdns_recursor --version
Aug 30 06:39:50 PowerDNS Recursor 4.0.0-alpha2 (C) 2001-2016 PowerDNS.COM BV
Aug 30 06:39:50 Using 64-bits mode. Built using gcc 5.4.0 20160609.
Aug 30 06:39:50 PowerDNS comes with ABSOLUTELY NO WARRANTY. This is free 
software, and you are welcome to redistribute it according to the terms of the 
GPL version 2.
Aug 30 06:39:50 Features: openssl lua 
Aug 30 06:39:50 Configured with: " '--build=x86_64-linux-gnu' '--prefix=/usr' 
'--includedir=${prefix}/include' '--mandir=${prefix}/share/man' 
'--infodir=${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var' 
'--disable-silent-rules' '--libdir=${prefix}/lib/x86_64-linux-gnu' 
'--libexecdir=${prefix}/lib/x86_64-linux-gnu' '--disable-maintainer-mode' 
'--disable-dependency-tracking' '--sysconfdir=/etc/powerdns' 
'--enable-reproducible' '--with-lua' 'build_alias=x86_64-linux-gnu' 'CFLAGS=-g 
-O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security' 
'LDFLAGS=-Wl,-Bsymbolic-functions -fPIE -pie -Wl,-z,relro -Wl,-z,now -latomic' 
'CPPFLAGS=-Wdate-time -D_FORTIFY_SOURCE=2' 'CXXFLAGS=-g -O2 -fPIE 
-fstack-protector-strong -Wformat -Werror=format-security 
-DPACKAGEVERSION='\''"4.0.0~alpha2-2ubuntu0.1.Ubuntu"'\'''"
```

And here is the output of a dig request:

```
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 16855
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;<Some server internaly>. IN A

;; Query time: 654 msec
;; SERVER: 10.176.228.2#53(10.176.228.2)
;; WHEN: Fri Aug 30 08:13:13 CEST 2019
;; MSG SIZE  rcvd: 68
```

Without changing anything to the configuration, we installed the
upstream 4.0.X series version.

Here you find the output of the version number, and the same dig request
as above:

```# pdns_recursor --version
Aug 30 07:03:37 PowerDNS Recursor 4.0.9 (C) 2001-2017 PowerDNS.COM BV
Aug 30 07:03:37 Using 64-bits mode. Built using gcc 5.4.0 20160609 on Nov  6 
2018 16:30:52 by root@505b66e59573.
Aug 30 07:03:37 PowerDNS comes with ABSOLUTELY NO WARRANTY. This is free 
software, and you are welcome to redistribute it according to the terms of the 
GPL version 2.
Aug 30 07:03:37 Features: openssl lua 
Aug 30 07:03:37 Configured with: " '--host=' '--build=' '--prefix=/usr' 
'--sysconfdir=/etc/powerdns' '--mandir=${prefix}/share/man' 
'--infodir=${prefix}/share/info' '--libdir=${prefix}/lib/' 
'--libexecdir=${prefix}/lib' '--with-lua' '--with-protobuf=yes' 
'--enable-systemd' '--with-systemd=/lib/systemd/system' 'build_alias=' 
'host_alias=' 'CFLAGS=-g -O2 -fPIE -fstack-protector-strong -Wformat 
-Werror=format-security' 'LDFLAGS=-Wl,-Bsymbolic-functions -fPIE -pie 
-Wl,-z,relro -Wl,-z,now' 'CPPFLAGS=-Wdate-time -D_FORTIFY_SOURCE=2' 
'CXXFLAGS=-g -O2 -fPIE -fstack-protector-strong -Wformat 
-Werror=format-security'"

```

```
; <<>> DiG 9.10.3-P4-Ubuntu <<>> @10.176.228.2 
storage-dc1r03n12.fuel.eu-zrh.hub.k.grp
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50592
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;<Some server internaly>. IN A

;; ANSWER SECTION:
<Some server internaly>. 0 IN A 10.X.X.X

;; Query time: 164 msec
;; SERVER: 10.176.228.2#53(10.176.228.2)
;; WHEN: Fri Aug 30 08:53:48 CEST 2019
;; MSG SIZE  rcvd: 84
```

Please backport bugfix for pdns_recursor, or update the distributed
package to the last 4.0.X version.

Version of ubuntu:
# cat /etc/os-release 
NAME="Ubuntu"
VERSION="16.04.5 LTS (Xenial Xerus)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 16.04.5 LTS"
VERSION_ID="16.04"
HOME_URL="http://www.ubuntu.com/";
SUPPORT_URL="http://help.ubuntu.com/";
BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/";
VERSION_CODENAME=xenial
UBUNTU_CODENAME=xenial

Regards,
Luis Domingues

** Affects: pdns-recursor (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: xenial

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1842034

Title:
  pdns-recursor: make the record cache forward-aware

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pdns-recursor/+bug/1842034/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to