To launch the internal webserver, add a :ref:`setting-webserver` to the configuration file.
This will instruct PowerDNS to start a webserver on localhost at port 8081, without password protection.
-By default the webserver listens on localhost, meaning only local users (on the same host) will be able to access the webserver. Since the default ACL before 4.1.0 allows access from everywhere if :ref:`webserver-address` is set to a different value, we strongly advise the use of a password protection.
+By default the webserver listens on localhost, meaning only local users (on the same host) will be able to access the webserver. Since the default ACL before 4.1.0 allows access from everywhere if :ref:`setting-webserver-address` is set to a different value, we strongly advise the use of a password protection.
The webserver lists a lot of potentially sensitive information about the PowerDNS process, including frequent queries, frequently failing queries, lists of remote hosts sending queries, hosts sending corrupt queries etc.
The webserver does not allow remote management of the daemon, but allows control over the size of the queries and response rings that may be used to monitor activities.
The following webserver related configuration items are available:
itself as a slave for that zone.
Before a supermaster notification succeeds, the following conditions
-must be met: - The supermaster must carry a SOA record for the notified
-domain - The supermaster IP must be present in the 'supermaster' table -
-The set of NS records for the domain, as retrieved by the slave from the
-supermaster, must include the name that goes with the IP address in the
-supermaster table - If your master sends signed NOTIFY it will mark that
-TSIG key as the TSIG key used for retrieval as well - If you turn off
-:ref:`setting-allow-unsigned-supermaster`, then your supermaster(s) are required
-to sign their notifications.
+must be met:
+
+ - The supermaster must carry a SOA record for the notified domain
+ - The supermaster IP must be present in the 'supermaster' table
+ - The set of NS records for the domain, as retrieved by the slave from the supermaster, must include the name that goes with the IP address in the supermaster table
+ - If your master sends signed NOTIFY it will mark that TSIG key as the TSIG key used for retrieval as well
+ - If you turn off :ref:`setting-allow-unsigned-supermaster`, then your supermaster(s) are required to sign their notifications.
.. warning::
If you use another PowerDNS server as master and have
Intercepting queries with Lua
=============================
To get a quick start, we have supplied a sample script that showcases all functionality described below.
-Please find it `here <https://github.com/PowerDNS/pdns/blob/master/pdns/powerdns-example-script.lua>`_.
+Please find it `here <https://github.com/PowerDNS/pdns/blob/master/pdns/recursordist/contrib/powerdns-example-script.lua>`_.
Queries can be intercepted in many places: