pdnsd negate config issues

mpapet · 08-21-2012, 01:45 PM

I'm having some trouble sorting out what's wrong with my pdnsd config and I'm no expert on DNS serving. I have a neg stanza that looks like:

Code:

neg {
        name=doubleclick.net;
        types=domain;   // This will also block xxx.doubleclick.net, etc.
}

pdnsd-ctl dump doubleclick.net returns

Code:

Opening socket /var/cache/pdnsd/pdnsd.status
doubleclick.net.
    08/21 11:16:13    A       216.73.93.8
    08/21 11:16:13    NS      ns4.doubleclick.net.
    08/21 11:16:13    NS      ns1.doubleclick.net.
    08/21 11:16:13    NS      ns2.doubleclick.net.
    08/21 11:16:13    NS      ns3.doubleclick.net.

Succeeded

pdnsd-ctl dump .doubleclick.net returns some negated, some NOT negated

Code:

Opening socket /var/cache/pdnsd/pdnsd.status
dart.l.doubleclick.net.
    08/21 11:40:25    A       74.125.239.27
    08/21 11:40:25    A       74.125.239.28

survey.g.doubleclick.net.
    08/09 13:13:22    A       (negated)
    08/09 13:13:22    CNAME   appspot.l.google.com.

adclick.g.doubleclick.net.
    08/09 14:46:30    A       (negated)
    08/09 14:46:30    CNAME   pagead.l.doubleclick.net.

static.doubleclick.net.
    08/09 14:46:58    A       (negated)
    08/09 14:46:58    CNAME   static-doubleclick-net.l.google.com.

iv.doubleclick.net.
    07/12 13:31:14    A       (negated)
    07/12 13:31:14    CNAME   dart.l.doubleclick.net.

ad.mo.doubleclick.net.
    08/16 12:49:32    A       (negated)
    08/16 12:49:32    CNAME   mobile-displayads.l.doubleclick.net.

motifcdn.doubleclick.net.
    08/17 10:55:45    A       (negated)
    08/17 10:55:45    CNAME   motifcdn.doubleclick.net.edgesuite.net.

dynamicads.g.doubleclick.net.
    08/09 14:05:20    A       (negated)
    08/09 14:05:20    CNAME   rich-media-dynamic-ads-api.l.doubleclick.net.

googleads.g.doubleclick.net.
    08/21 11:34:50    A       (negated)
    08/21 11:34:50    CNAME   pagead.l.doubleclick.net.

partnerad.l.doubleclick.net.
    08/21 10:29:37    A       74.125.239.13
    08/21 10:29:37    A       74.125.239.25
    08/21 10:29:37    A       74.125.239.26

ad-g.doubleclick.net.
    08/09 14:05:05    A       (negated)
    08/09 14:05:05    CNAME   dart.l.doubleclick.net.

stats.g.doubleclick.net.
    08/15 12:48:42    A       (negated)
    08/15 12:48:42    CNAME   stats.l.doubleclick.net.

stats.l.doubleclick.net.
    08/15 12:48:42    A       173.194.79.154
    08/15 12:48:42    A       173.194.79.155
    08/15 12:48:42    A       173.194.79.156
    08/15 12:48:42    A       173.194.79.157

doubleclick.net.
    08/21 11:16:13    A       216.73.93.8
    08/21 11:16:13    NS      ns4.doubleclick.net.
    08/21 11:16:13    NS      ns1.doubleclick.net.
    08/21 11:16:13    NS      ns2.doubleclick.net.
    08/21 11:16:13    NS      ns3.doubleclick.net.

pagead46.l.doubleclick.net.
    08/21 11:34:50    A       74.125.239.13
    08/21 11:34:50    A       74.125.239.25
    08/21 11:34:50    A       74.125.239.26

motifcdn2.doubleclick.net.
    08/21 11:12:16    A       (negated)
    08/21 11:12:16    CNAME   motifcdn2.doubleclick.net.edgesuite.net.

securepubads.g.doubleclick.net.
    07/12 12:59:40    A       (negated)
    07/12 12:59:40    CNAME   partnerad.l.doubleclick.net.

n4403ad.doubleclick.net.
    08/13 12:26:33    A       (negated)
    08/13 12:26:33    CNAME   dart.l.doubleclick.net.

adx.g.doubleclick.net.
    08/21 11:34:43    A       (negated)
    08/21 11:34:43    CNAME   pagead46.l.doubleclick.net.

pubads.g.doubleclick.net.
    08/21 10:29:37    A       (negated)
    08/21 10:29:37    CNAME   partnerad.l.doubleclick.net.

pagead.l.doubleclick.net.
    08/21 11:38:50    A       74.125.239.13
    08/21 11:38:50    A       74.125.239.25
    08/21 11:38:50    A       74.125.239.26

ns1.doubleclick.net.
    08/21 11:16:13    A       216.73.84.10

ns2.doubleclick.net.
    08/21 11:16:13    A       216.73.87.10

ns3.doubleclick.net.
    08/21 11:16:13    A       70.32.147.246

ns4.doubleclick.net.
    08/21 11:16:13    A       70.32.147.254

mobile-displayads.l.doubleclick.net.
    08/16 12:49:32    A       74.125.224.205
    08/16 12:49:32    A       74.125.224.217
    08/16 12:49:32    A       74.125.224.218

g.doubleclick.net.
    08/14 14:33:31    SOA     ns1.google.com. dns-admin.google.com. 1494422 21600 3600 1209600 300

l.doubleclick.net.
    08/21 11:40:25    NS      ns1.google.com.
    08/21 11:40:25    NS      ns2.google.com.
    08/21 11:40:25    NS      ns3.google.com.
    08/21 11:40:25    NS      ns4.google.com.

m.doubleclick.net.
    08/20 07:17:27    A       (negated)
    08/20 07:17:27    CNAME   s0-2mdn-net.l.google.com.

2542116.fls.doubleclick.net.
    08/10 12:02:57    A       (negated)
    08/10 12:02:57    CNAME   dart.l.doubleclick.net.

gan.doubleclick.net.
    07/24 14:46:05    A       (negated)
    07/24 14:46:05    CNAME   dart.l.doubleclick.net.

rich-media-dynamic-ads-api.l.doubleclick.net.
    08/09 14:05:20    A       173.194.79.148
    08/09 14:05:20    A       173.194.79.149

studioapi.doubleclick.net.
    07/06 17:13:57    A       216.73.92.110

ad-apac.doubleclick.net.
    08/09 13:28:35    A       (negated)
    08/09 13:28:35    CNAME   dart.l.doubleclick.net.

fls.doubleclick.net.
    08/21 10:19:08    A       (negated)
    08/21 10:19:08    CNAME   dart.l.doubleclick.net.

ad-emea.doubleclick.net.
    08/15 14:22:57    A       (negated)
    08/15 14:22:57    CNAME   dart.l.doubleclick.net.

cm.g.doubleclick.net.
    08/21 11:34:51    A       (negated)
    08/21 11:34:51    CNAME   pagead.l.doubleclick.net.

ad.au.doubleclick.net.
    07/13 10:08:05    A       (negated)
    07/13 10:08:05    CNAME   dart.l.doubleclick.net.

ad.ca.doubleclick.net.
    08/15 11:37:39    A       (negated)
    08/15 11:37:39    CNAME   dart.l.doubleclick.net.

s0.doubleclick.net.
    08/09 14:37:53    A       (negated)
    08/09 14:37:53    CNAME   static-doubleclick-net.l.google.com.

ad.doubleclick.net.
    08/21 11:40:25    A       (negated)
    08/21 11:40:25    CNAME   dart.l.doubleclick.net.

Finally, "dig stats.l.doubleclick.net" successfully returns the record. Does that mean pdnsd is misconfigured such that a negated domain is still having a request fulfilled?

unSpawn · 08-21-2012, 03:38 PM

Did you 'pdnsd-ctl record [for-each-recordname] delete' before running 'pdnsd-ctl dump .doubleclick.net'?

mpapet · 08-22-2012, 02:14 PM

That helped! Thank you.