Welcome to the PowerDNS Blog

Pieter Lexis on Nov 09, 2018

Today we have released the PowerDNS Recursor 4.1.7. It is an update to relax EDNS compliance requirements from upstream authoritative servers. Recursor version 4.1.5 (and, by extension, 4.1.6), contains a fix for...

Pieter Lexis on Nov 07, 2018

We have just released the PowerDNS Recursor 4.1.6. This release fixes an issue with DNSSEC validation introduced in Recursor 4.1.5 by reverting a code-change related to the acceptation of ADDITIONAL records. We w...

Erik Winkels on Nov 06, 2018

We’ve released PowerDNS Authoritative Server 4.0.6 & 4.1.5 and Recursor 4.0.9 & 4.1.5. These are security releases with additional minor improvements and bug fixes. Minimal patches for the releases are av...

Peter van Dijk on Oct 08, 2018

The root KSK rollover is currently planned for 1600 UTC on the 11th of October 2018 – a few days from now. If you are using PowerDNS Recursor for DNSSEC validation, please keep reading! During the KSK rollover, t...

Bert Hubert on Sep 10, 2018

With some care, it turns out to be possible to spoof fake DNS responses using fragmented datagrams. While preparing a presentation for XS4ALL back in 2009, I found out how this could be done, but I never got roun...

Pieter Lexis on Aug 31, 2018

We’ve just released PowerDNS Recursor version 4.1.4, this is a maintenance release with no major changes. One new setting was added, this is the max-udp-queries-per-round, which controls the maximum amount of mes...

Remi Gacogne on May 22, 2018

This release improves the stability and resiliency of the RPZ implementation, prevents metrics gathering from slowing down the processing of DNS queries and fixes an issue related to the cleaning of EDNS Client S...

Erik Winkels on Mar 29, 2018

This release improves the stability and resiliency of the RPZ implementation and fixes several issues related to EDNS Client Subnet. The full changelog looks like this: New Features #6344: Add FFI version of gett...

Peter van Dijk on Mar 22, 2018

In a coordinated effort between PowerDNS, ISC, CZ.NIC and NLnetlabs, starting Feb 1 2019, workarounds for severely broken EDNS setups will be removed from our collective body of software. For the PowerDNS Recurso...

Erik Winkels on Jan 22, 2018

This is the second release in the 4.1 train with a fix for the following DNSSEC security advisory: PowerDNS Security Advisory 2018-01: Correctly handle ancestor delegation NSEC{,3} for children (CVE-2018-1000003)...