Welcome to the PowerDNS Blog
PowerDNS Recursor 4.1.6 Released
We have just released the PowerDNS Recursor 4.1.6. This release fixes an issue with DNSSEC validation introduced in Recursor 4.1.5 by reverting a code-change related to the acceptation of ADDITIONAL records. We w...
PowerDNS Authoritative Server 4.0.6 & 4.1.5 and Recursor 4.0.9 & 4....
We’ve released PowerDNS Authoritative Server 4.0.6 & 4.1.5 and Recursor 4.0.9 & 4.1.5. These are security releases with additional minor improvements and bug fixes. Minimal patches for the releases are av...
PowerDNS and the ICANN KSK roll
The root KSK rollover is currently planned for 1600 UTC on the 11th of October 2018 – a few days from now. If you are using PowerDNS Recursor for DNSSEC validation, please keep reading! During the KSK rollover, t...
Spoofing DNS with fragments
With some care, it turns out to be possible to spoof fake DNS responses using fragmented datagrams. While preparing a presentation for XS4ALL back in 2009, I found out how this could be done, but I never got roun...
PowerDNS Recursor 4.1.4 released
We’ve just released PowerDNS Recursor version 4.1.4, this is a maintenance release with no major changes. One new setting was added, this is the max-udp-queries-per-round, which controls the maximum amount of mes...
PowerDNS Recursor 4.1.3 Released
This release improves the stability and resiliency of the RPZ implementation, prevents metrics gathering from slowing down the processing of DNS queries and fixes an issue related to the cleaning of EDNS Client S...
PowerDNS Recursor 4.1.2 Released
This release improves the stability and resiliency of the RPZ implementation and fixes several issues related to EDNS Client Subnet. The full changelog looks like this: New Features #6344: Add FFI version of gett...
Removing EDNS Workarounds
In a coordinated effort between PowerDNS, ISC, CZ.NIC and NLnetlabs, starting Feb 1 2019, workarounds for severely broken EDNS setups will be removed from our collective body of software. For the PowerDNS Recurso...
PowerDNS Recursor 4.1.1
This is the second release in the 4.1 train with a fix for the following DNSSEC security advisory: PowerDNS Security Advisory 2018-01: Correctly handle ancestor delegation NSEC{,3} for children (CVE-2018-1000003)...
PowerDNS Recursor 4.0.8 Released
Today we announce the release of the PowerDNS Recursor 4.0.8 which contains a fix for the following security advisory: PowerDNS Security Advisory 2017-08: Crafted CNAME answer can cause a denial of service (CVE-2...