Pipebackend and "Should not get here"

classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|

Pipebackend and "Should not get here"

Dan Campbell
I’ve recently upgraded some PowerDNS Authoritative servers from  2.9.22 to 3.4.5, and I use the pipebackend.
 
I've noticed that when DNS queries come in for a non-existent name in my domain, I get records like the following in /var/log/messages:
 
Jul 28 16:31:18 esd05ns01d pdns[13964]: Should not get here (hosta.mydomain.com|1): please run pdnssec rectify-zone mydomain.com

I've been searching for a way to prevent these messages, but only find information related to the gmysql backend.
 
Is there a way to address this with the pipebackend? What am I doing wrong?

Dan Campbell

_______________________________________________
Pdns-users mailing list
[hidden email]
http://mailman.powerdns.com/mailman/listinfo/pdns-users
Reply | Threaded
Open this post in threaded view
|

Re: Pipebackend and "Should not get here"

Aki Tuomi
On Tue, Aug 11, 2015 at 07:27:41PM -0600, Dan Campbell wrote:

> I’ve recently upgraded some PowerDNS Authoritative servers from  2.9.22 to 3.4.5, and I use the pipebackend.
>  
> I've noticed that when DNS queries come in for a non-existent name in my domain, I get records like the following in /var/log/messages:
>  
> Jul 28 16:31:18 esd05ns01d pdns[13964]: Should not get here (hosta.mydomain.com <http://hosta.mydomain.com/>|1): please run pdnssec rectify-zone mydomain.com <http://mydomain.com/>
>
> I've been searching for a way to prevent these messages, but only find information related to the gmysql backend.
>  
> Is there a way to address this with the pipebackend? What am I doing wrong?
>
> —
> Dan Campbell

can you add query/response logging to your script and maybe share it? You can
replace your domain with mydomain in this case.

Aki

_______________________________________________
Pdns-users mailing list
[hidden email]
http://mailman.powerdns.com/mailman/listinfo/pdns-users
Reply | Threaded
Open this post in threaded view
|

Re: Pipebackend and "Should not get here"

Peter van Dijk
Hello,

On 12 Aug 2015, at 12:19, Aki Tuomi wrote:

> You can replace your domain with mydomain in this case.

No - please do not replace stuff. Debugging with obfuscated data is a
major pain. We need real data to debug things.

Kind regards,
--
Peter van Dijk
PowerDNS.COM BV - https://www.powerdns.com/

_______________________________________________
Pdns-users mailing list
[hidden email]
http://mailman.powerdns.com/mailman/listinfo/pdns-users
Reply | Threaded
Open this post in threaded view
|

Re: Pipebackend and "Should not get here"

Dan Campbell
In reply to this post by Dan Campbell

> On August 12, 2015 at 6:32 AM Peter van Dijk <[hidden email]> wrote:
>
>
> Hello,
>
> On 12 Aug 2015, at 12:19, Aki Tuomi wrote:
>
> > You can replace your domain with mydomain in this case.
>
> No - please do not replace stuff. Debugging with obfuscated data is a
> major pain. We need real data to debug things.

 
Below is a log from a test server showing query and response for two queries.
The first query is for a name that exists, the second is for a name that does not exist:
 
Q       w3.dst.dhe.ibm.com      IN      SOA     -1      9.17.58.71      0.0.0.0
END
Q       dst.dhe.ibm.com IN      SOA     -1      9.17.58.71      0.0.0.0
DATA    dst.dhe.ibm.com IN      SOA     300     -1      lexbz98214.lexington.ibm.com.   nospam.us.ibm.com.      2015051407      300     300     300     60
END
Q       w3.dst.dhe.ibm.com      IN      NS      -1      9.17.58.71      0.0.0.0
END
Q       w3.dst.dhe.ibm.com      IN      ANY     -1      9.17.58.71      0.0.0.0
DATA    w3.dst.dhe.ibm.com      IN      CNAME   300     -1      submit.boulder.ibm.com
DATA    w3.dst.dhe.ibm.com      IN      NS      300     -1      lexbz98214.lexington.ibm.com
DATA    w3.dst.dhe.ibm.com      IN      NS      300     -1      lexbz98237.lexington.ibm.com
END
Q       www.dst.dhe.ibm.com     IN      SOA     -1      9.17.58.71      0.0.0.0
END
Q       dst.dhe.ibm.com IN      SOA     -1      9.17.58.71      0.0.0.0
DATA    dst.dhe.ibm.com IN      SOA     300     -1      lexbz98214.lexington.ibm.com.   nospam.us.ibm.com.      2015051407      300     300     300     60
END
Q       www.dst.dhe.ibm.com     IN      NS      -1      9.17.58.71      0.0.0.0
END
Q       www.dst.dhe.ibm.com     IN      ANY     -1      9.17.58.71      0.0.0.0
DATA    www.dst.dhe.ibm.com     IN      NS      300     -1      lexbz98214.lexington.ibm.com
DATA    www.dst.dhe.ibm.com     IN      NS      300     -1      lexbz98237.lexington.ibm.com
END

 
The second query results in the following record in /var/log/messages:
 
 Aug 12 11:54:55 esd05ns01d pdns[18417]: Should not get here (www.dst.dhe.ibm.com|1): please run pdnssec rectify-zone dst.dhe.ibm.com
 
--
Dan Campbell
_______________________________________________
Pdns-users mailing list
[hidden email]
http://mailman.powerdns.com/mailman/listinfo/pdns-users
Reply | Threaded
Open this post in threaded view
|

Re: Pipebackend and "Should not get here"

Aki Tuomi
Well, you can't have CNAME and NS on same label. Just saying.

That's probably one problem.

Aki

On Thu, Aug 13, 2015 at 09:24:36AM -0600, [hidden email] wrote:

>
> > On August 12, 2015 at 6:32 AM Peter van Dijk <[hidden email]> wrote:
> >
> >
> > Hello,
> >
> > On 12 Aug 2015, at 12:19, Aki Tuomi wrote:
> >
> > > You can replace your domain with mydomain in this case.
> >
> > No - please do not replace stuff. Debugging with obfuscated data is a
> > major pain. We need real data to debug things.
>
>  
> Below is a log from a test server showing query and response for two queries.
> The first query is for a name that exists, the second is for a name that does not exist:
>  
> Q       w3.dst.dhe.ibm.com      IN      SOA     -1      9.17.58.71      0.0.0.0
> END
> Q       dst.dhe.ibm.com IN      SOA     -1      9.17.58.71      0.0.0.0
> DATA    dst.dhe.ibm.com IN      SOA     300     -1      lexbz98214.lexington.ibm.com.   nospam.us.ibm.com.      2015051407      300     300     300     60
> END
> Q       w3.dst.dhe.ibm.com      IN      NS      -1      9.17.58.71      0.0.0.0
> END
> Q       w3.dst.dhe.ibm.com      IN      ANY     -1      9.17.58.71      0.0.0.0
> DATA    w3.dst.dhe.ibm.com      IN      CNAME   300     -1      submit.boulder.ibm.com
> DATA    w3.dst.dhe.ibm.com      IN      NS      300     -1      lexbz98214.lexington.ibm.com
> DATA    w3.dst.dhe.ibm.com      IN      NS      300     -1      lexbz98237.lexington.ibm.com
> END
> Q       www.dst.dhe.ibm.com     IN      SOA     -1      9.17.58.71      0.0.0.0
> END
> Q       dst.dhe.ibm.com IN      SOA     -1      9.17.58.71      0.0.0.0
> DATA    dst.dhe.ibm.com IN      SOA     300     -1      lexbz98214.lexington.ibm.com.   nospam.us.ibm.com.      2015051407      300     300     300     60
> END
> Q       www.dst.dhe.ibm.com     IN      NS      -1      9.17.58.71      0.0.0.0
> END
> Q       www.dst.dhe.ibm.com     IN      ANY     -1      9.17.58.71      0.0.0.0
> DATA    www.dst.dhe.ibm.com     IN      NS      300     -1      lexbz98214.lexington.ibm.com
> DATA    www.dst.dhe.ibm.com     IN      NS      300     -1      lexbz98237.lexington.ibm.com
> END
>
>  
> The second query results in the following record in /var/log/messages:
>  
>  Aug 12 11:54:55 esd05ns01d pdns[18417]: Should not get here (www.dst.dhe.ibm.com|1): please run pdnssec rectify-zone dst.dhe.ibm.com
>  
> --
> Dan Campbell
> _______________________________________________
> Pdns-users mailing list
> [hidden email]
> http://mailman.powerdns.com/mailman/listinfo/pdns-users
>

_______________________________________________
Pdns-users mailing list
[hidden email]
http://mailman.powerdns.com/mailman/listinfo/pdns-users
Reply | Threaded
Open this post in threaded view
|

Re: Pipebackend and "Should not get here"

Dan Campbell
 
Thanks, that was the problem.
 
--
Dan Campbell
 

> On August 14, 2015 at 12:31 PM Aki Tuomi <[hidden email]> wrote:
>
>
> Well, you can't have CNAME and NS on same label. Just saying.
>
> That's probably one problem.
>
> Aki
>
> On Thu, Aug 13, 2015 at 09:24:36AM -0600, [hidden email] wrote:
> >
> > > On August 12, 2015 at 6:32 AM Peter van Dijk <[hidden email]> wrote:
> > >
> > >
> > > Hello,
> > >
> > > On 12 Aug 2015, at 12:19, Aki Tuomi wrote:
> > >
> > > > You can replace your domain with mydomain in this case.
> > >
> > > No - please do not replace stuff. Debugging with obfuscated data is a
> > > major pain. We need real data to debug things.
> >
> >
> > Below is a log from a test server showing query and response for two queries.
> > The first query is for a name that exists, the second is for a name that does not exist:
> >
> > Q w3.dst.dhe.ibm.com IN SOA -1 9.17.58.71 0.0.0.0
> > END
> > Q dst.dhe.ibm.com IN SOA -1 9.17.58.71 0.0.0.0
> > DATA dst.dhe.ibm.com IN SOA 300 -1 lexbz98214.lexington.ibm.com. nospam.us.ibm.com. 2015051407 300 300 300 60
> > END
> > Q w3.dst.dhe.ibm.com IN NS -1 9.17.58.71 0.0.0.0
> > END
> > Q w3.dst.dhe.ibm.com IN ANY -1 9.17.58.71 0.0.0.0
> > DATA w3.dst.dhe.ibm.com IN CNAME 300 -1 submit.boulder.ibm.com
> > DATA w3.dst.dhe.ibm.com IN NS 300 -1 lexbz98214.lexington.ibm.com
> > DATA w3.dst.dhe.ibm.com IN NS 300 -1 lexbz98237.lexington.ibm.com
> > END
> > Q www.dst.dhe.ibm.com IN SOA -1 9.17.58.71 0.0.0.0
> > END
> > Q dst.dhe.ibm.com IN SOA -1 9.17.58.71 0.0.0.0
> > DATA dst.dhe.ibm.com IN SOA 300 -1 lexbz98214.lexington.ibm.com. nospam.us.ibm.com. 2015051407 300 300 300 60
> > END
> > Q www.dst.dhe.ibm.com IN NS -1 9.17.58.71 0.0.0.0
> > END
> > Q www.dst.dhe.ibm.com IN ANY -1 9.17.58.71 0.0.0.0
> > DATA www.dst.dhe.ibm.com IN NS 300 -1 lexbz98214.lexington.ibm.com
> > DATA www.dst.dhe.ibm.com IN NS 300 -1 lexbz98237.lexington.ibm.com
> > END
> >
> >
> > The second query results in the following record in /var/log/messages:
> >
> > Aug 12 11:54:55 esd05ns01d pdns[18417]: Should not get here (www.dst.dhe.ibm.com|1): please run pdnssec rectify-zone dst.dhe.ibm.com
> >
> > --
> > Dan Campbell
> > _______________________________________________
> > Pdns-users mailing list
> > [hidden email]
> > http://mailman.powerdns.com/mailman/listinfo/pdns-users
> >

_______________________________________________
Pdns-users mailing list
[hidden email]
http://mailman.powerdns.com/mailman/listinfo/pdns-users