J'ai suivi le tuto (à la lettre + lecture et adaptation du manuel pdnsd) pour mettre en place pdnsd, et j'obtiens cette erreur :
Cette erreur disparait si je remets mes serveur DNS dans mon resolv.conf (le wiki indique de tout enlever et de ne garder que 127.0.0.1) :$ sudo nslookup www.google.com 127.0.0.1
;; Got SERVFAIL reply from 127.0.0.1, trying next server
;; Got SERVFAIL reply from 127.0.0.1, trying next server
Server: 127.0.0.1
Address: 127.0.0.1#53
** server can't find www.google.com: SERVFAIL
Voici mon fichier de config de pdnsd :$ sudo nslookup www.google.com 127.0.0.1
Mot de passe :
;; Got SERVFAIL reply from 127.0.0.1, trying next server
;; Got SERVFAIL reply from 127.0.0.1, trying next server
Server: 80.10.246.129
Address: 80.10.246.129#53
Non-authoritative answer:
www.google.com canonical name = www.l.google.com.
Name: www.l.google.com
Address: 209.85.227.106
Name: www.l.google.com
Address: 209.85.227.99
Name: www.l.google.com
Address: 209.85.227.103
Name: www.l.google.com
Address: 209.85.227.147
Name: www.l.google.com
Address: 209.85.227.105
Name: www.l.google.com
Address: 209.85.227.104
Voilà, c'est plus pour la geek attitude qu'un besoin réel... et j'avoue que j'aimerais bien satisfaire ma curiosité, et faire fonctionner ce cache dns.global {
perm_cache=1024;
cache_dir="/var/cache/pdnsd";
# pid_file = /var/run/pdnsd.pid;
run_as="pdnsd";
strict_setuid=on;
server_ip = 127.0.0.1; # Use eth0 here if you want to allow other
# machines on your network to query pdnsd.
status_ctl = on;
# paranoid=on; # This option reduces the chance of cache poisoning
# but may make pdnsd less efficient, unfortunately.
query_method=udp_tcp;
min_ttl=15m; # Retain cached entries at least 15 minutes.
max_ttl=1w; # One week.
timeout=10; # Global timeout option (10 seconds).
}
# The following section is most appropriate if you have a fixed connection to
# the Internet and an ISP which provides good DNS servers.
server {
label= "Orange";
ip = 80.10.246.129,192.168.0.1,192.168.1.1; # Put your ISP's DNS-server address(es) here.
# file ="/etc/resolv.conf";
# proxy_only=on; # Do not query any name servers beside your ISP's.
# This may be necessary if you are behind some
# kind of firewall and cannot receive replies
# from outside name servers.
timeout=4; # Server timeout; this may be much shorter
# that the global timeout option.
uptest=if; # Test if the network interface is active.
# interface=eth0; # The name of the interface to check.
interface=eth1; # The name of the interface to check.
interval=10m; # Check every 10 minutes.
purge_cache=off; # Keep stale cache entries in case the ISP's
# DNS servers go offline.
}
source {
owner=localhost;
# serve_aliases=on;
file="/etc/hosts";
}
rr {
name=localhost;
reverse=on;
a=127.0.0.1;
owner=localhost;
soa=localhost,root.localhost,42,86400,900,86400,86400;
}
Merci.
Cactus.
