Welcome to the PowerDNS Blog
Diverting recursor-to-auth attacks
We get frequent reports from users/customers about various DNS-related attacks they are facing on either their authoritatives or recursors. This post focuses on one kind of attack that involves both. The attack w...
PowerDNS “Graphing as a Service”
Over the past few months,we’ve worked on our graphing tool, which has proved to be a wonderful aid in debugging. If you want to get the best help from us in diagnosing your problems, read on. PowerDNS Authoritati...
PowerDNS Security Advisory 2014-02
PowerDNS Security Advisory 2014-02: PowerDNS Recursor 3.6.1 and earlier can be made to provide bad service Hi everybody, Please be aware of PowerDNS Security Advisory 2014-02, which you can also find below. The g...
Recursor 3.6.2
Note Version 3.6.2 is a bugfix update to 3.6.1. Released on the 30th of October 2014. Official download page A list of changes since 3.6.1 follows. commit ab14b4f: expedite servfail generation for ezdns-like fail...
PowerDNS Security Status Polling
PowerDNS software sadly sometimes has critical security bugs. Even though we send out notifications of these via all channels available, our recent security releases have taught us that not everybody actually fin...
Security Update: PowerDNS Recursor 3.6.1
Hi everybody, We regret that we have to announce a PowerDNS Recursor security release: Issue: A specific sequence of packets can crash PowerDNS Recursor 3.6.0 remotely CVE: CVE-2014-3614 Affected: All deployments...
Recursor 3.6.0 released
Note Downloads: Official download page native RHEL5/6 packages from Kees Monshouwer This is a performance, feature and bugfix update to 3.5/3.5.3. It contains important fixes for slightly broken domain names, whi...
Recursor 3.6.0 Release Candidate 1
RC1 released May 30th, 2014 Downloads: pdns-recursor-3.6.0-rc1.tar.bz2 semistatic packages native RHEL5/6 packages from Kees Monshouwer This is a performance, feature and bugfix update to 3.5/3.5.3. It contains i...
A surprising discovery on converting IPv6 addresses: we no longer prefer ge...
Yesterday, we were contacted by PowerDNS user James Baer who noted strange crashes in PowerDNS (on Linux) upon adding thousands and thousands of IP addresses to his system. Notably, PowerDNS did not even use any ...
Further DoS guidance, packages and patches available
Hi everybody, Sadly, further DoS attacks are plaguing the world of DNS, which is bad for the targets of those DoS attacks, but also for us DNS operators that help originate them. This post has guidance on how to ...