Re: pdns-recursor help

Otto Moerbeek via Pdns-users <[email protected]> Sun, 18 Feb 2024 10:48:22 +0100

Newsgroups	gmane.network.dns.powerdns.user
Message-ID	<[email protected]>

On Sun, Feb 18, 2024 at 01:35:04AM -0800, Bill MacAllister wrote:

> On 2024-02-17 23:30, Otto Moerbeek wrote:
> > On Sat, Feb 17, 2024 at 06:07:16PM -0800, Bill MacAllister wrote:
> > 
> > > Okay, I set "dnssec=off" and look ups are working now.  Guess I
> > > need to educate myself about dnssec.  I would like to make the
> > > dnssec default work if I can.  Pointers welcomed.
> > > 
> > > Bill
> > 
> > Looking at the trace your upstream mangles DNS. DNSSEC was designed to
> > prtotect against that.
> 
> Hmmm, is this a problem with my list of root servers?  Or maybe a
> protocol aware router/firewall is "helping" and breaking the dialogue?
> The problem might be in the Comcast hardware that was just replaced.
> I'll check that out in the morning.
> 

Your root hints are probably fine, it's a box somewhere that is doing
stuff to your DNS request/replies.

	-Otto