Summary

PowerDNS Recursor has a config key dont-query to include addresses that should not be queried by pdns-recursor. Its default value is set to 127.0.0.0/8, 10.0.0.0/8, 100.64.0.0/10, 169.254.0.0/16, 192.168.0.0/16, 172.16.0.0/12, ::1/128, fc00::/7, fe80::/10, 0.0.0.0/8, 192.0.0.0/24, 192.0.2.0/24, 198.51.100.0/24, 203.0.113.0/24, 240.0.0.0/4, ::/96, ::ffff:0:0/96, 100::/64, 2001:db8::/32.

I propose to add a config entry to change this settings.

Use case

dn42 uses addresses in those private ranges, including using them as authoritative DNS servers.

Additional information

It would be appreciated if custom options can be added to the recursor.conf inside VyOS config for options beyond this issue. Now I have to resort to post-commit-hooks to patch the generated configuration files.