Deadwood beta on debian lenny

[Sebastian Müller]

Am 25.07.2010 11:34, schrieb Sam Trenholme:
>> Another question, is verbose_level no longer working?
> 
> It works but the messages various verbose levels show is completely
> different from what MaraDNS does with verbose_level.
> 
> To see all DNS queries, one needs a query level of 100.

Thanks for the hint. It's working now.

It seems like recursive_acl is limited to 6 nets and got some kind of
overflow (/bad looping?!).

First of all, my current dwood3rc:

> bind_address="127.0.0.1,85.93.18.63"
> tcp_listen = 1
> chroot_dir = "/etc/deadwood"
> recursive_acl =
"127.0.0.1/8,78.42.0.0/15,82.212.0.0/18,85.216.0.0/17,91.89.0.0/16,95.208.0.0/16,109.192.0.0/15,217.8.48.0/20"
> verbose_level = 100
> maxprocs = 8
> handle_overload = 1
> maradns_uid = 110
> maradns_gid = 114
> maximum_cache_elements = 60000
> cache_file = "dw_cache"
> resurrections = 1

As you can see, I am currently using 8 nets.
I am unable to do full testing since my girlfriend wants a working LAN.

on the local machine:

> # dig @127.0.0.1 google.de
> ; <<>> DiG 9.6-ESV-R1 <<>> @127.0.0.1 google.de
> ; (1 server found)
> ;; global options: +cmd
> ;; connection timed out; no servers could be reached


using a pc on net 109.192.0.0/15:

> $ dig @85.93.18.63 google.de
> ; <<>> DiG 9.7.0-P1 <<>> @85.93.18.63 google.de
> ; (1 server found)
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35547
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 0
>
> ;; QUESTION SECTION:
> ;google.de.                     IN      A
>
> ;; ANSWER SECTION:
> google.de.              289     IN      A       74.125.43.103
> google.de.              289     IN      A       74.125.43.147
> google.de.              289     IN      A       74.125.43.106
> google.de.              289     IN      A       74.125.43.105
> google.de.              289     IN      A       74.125.43.104
> google.de.              289     IN      A       74.125.43.99
>
> ;; Query time: 12 msec
> ;; SERVER: 85.93.18.63#53(85.93.18.63)
> ;; WHEN: Sun Jul 25 19:17:28 2010
> ;; MSG SIZE  rcvd: 123


When I change recursive_acl to fit 6 nets:
> recursive_acl =
"127.0.0.1/8,82.212.0.0/18,85.216.0.0/17,91.89.0.0/16,95.208.0.0/16,109.192.0.0/15"
and restart deadwood, dig resolves on localhost.
.
> # dig @127.0.0.1 google.de
> ; <<>> DiG 9.6-ESV-R1 <<>> @127.0.0.1 google.de
> ; (1 server found)
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18299
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 0

> ;; QUESTION SECTION:
> ;google.de.                     IN      A

> ;; ANSWER SECTION:
> google.de.              293     IN      A       74.125.43.103
> google.de.              293     IN      A       74.125.43.99
> google.de.              293     IN      A       74.125.43.106
> google.de.              293     IN      A       74.125.43.147
> google.de.              293     IN      A       74.125.43.105
> google.de.              293     IN      A       74.125.43.104

> ;; Query time: 0 msec
> ;; SERVER: 127.0.0.1#53(127.0.0.1)
> ;; WHEN: Sun Jul 25 19:28:35 2010
> ;; MSG SIZE  rcvd: 123