da dns immer lahmer wird, lasse ich nun den pdnsd als Caching-Proxy laufen.
Der würde auch perfekt laufen, wenn er auch bei einigen bestimmten Seiten wie z.B. ebay.de funktionieren würde.
Wenn ich ebay.de ohne pdnsd aufrufe sehe ich das ich mit vielen Servern kommuniziere, also auch welche von akamai.net.
Genau da scheint das Problem zu liegen, da das bei allen nicht funktionierenden Seiten ähnlich ist.
Aber woran kann das liegen?
Mein Config sieht so aus:
Code: Alles auswählen
// Read the pdnsd.conf(5) manpage for an explanation of the options.
/* Note: this file is overriden by automatic config files when
/etc/default/pdnsd AUTO_MODE is set and that
/usr/share/pdnsd/pdnsd-$AUTO_MODE.conf exists
*/
global {
perm_cache=5120;
cache_dir="/var/cache/pdnsd";
run_as="pdnsd";
server_port=53;
server_ip = 127.0.0.1; // Use eth0 here if you want to allow other
// machines on your network to query pdnsd.
status_ctl = on; // Aktivierung der Steuerung via Terminal per pdnsd-ctl Tool, z.B.: pdnsd-ctl empty-cache, pdnsd-ctl status
strict_setuid = on;
paranoid=on;
query_method=udp_tcp; // pdnsd must be compiled with tcp
// query support for this to work.
query_port_start = 1025;
query_port_end = 65535;
min_ttl=2h; // Retain cached entries at least 2 hours.
max_ttl=7d; // One week.
timeout=60; // Global timeout option (60 seconds).
randomize_recs = on;
proc_limit = 15;
procq_limit = 30;
tcp_qtimeout = 30s;
use_nss = on; // falls probleme off testen
// Don't enable if you don't recurse yourself, can lead to problems
// delegation_only="com","net";
par_queries=3; // Max. simultaneously made querys.
}
/* with status_ctl=on and resolvconf installed, this will work out from the box
this is the recommended setup for mobile machines */
server {
label="resolvconf";
proxy_only = on;
}
/*
// This section is meant for resolving from root servers.
server {
label = "myservers";
root_server=on;
randomize_servers = on;
ip = 85.214.73.63
, 213.73.91.35
, 79.99.234.56
;
port = 53;
lean_query = on;
timeout = 15s; // 15 seconds.
uptest = query;
interval = ontimeout; // Test every half hour.
ping_timeout = 300; // 30 seconds.
purge_cache = off;
caching = on;
preset = on;
exclude = .sparkasse-rhein-nahe.de,security.debian.org,.ebay.de,.ebaystatic.com;
policy = included;
proxy_only=on;
reject = 0.0.0.0/8,169.254.0.0/16,127.0.0.0/8,192.254.0.0/16,192.168.0.0/16,10.0.0.0/8,172.16.0.0/12;
reject_policy = fail;
reject_recursively = on;
}
*/
source {
owner=localhost;
// serve_aliases=on;
file="/etc/hosts";
}
rr {
name=localhost;
reverse=on;
a=127.0.0.1;
owner=localhost;
soa=localhost,root.localhost,42,86400,900,86400,86400;
}
/*
neg {
name=doubleclick.net;
types=domain; // This will also block xxx.doubleclick.net, etc.
}
*/
/*
neg {
name=google-analytics.com;
types=domain; // This will also block xxx.google-analytics.com, etc.
}
*/
/*
neg {
name=ivwbox.de;
types=domain; // This will also block xxx.ivwbox.de, etc.
}
*/
/*
neg {
name=bad.server.com; // Badly behaved server you don't want to connect to.
types=A,AAAA;
}
*/
/* vim:set ft=c: */