Here is output from my fully functional pdns-recursor instance:
Sep 12 19:48:25 runner02.incandescent.tech docker[429556]: Sep 12 17:48:25 PowerDNS Recursor 4.9.1 (C) 2001-2022 PowerDNS.COM BV Sep 12 19:48:25 runner02.incandescent.tech docker[429556]: Sep 12 17:48:25 Using 64-bits mode. Built using gcc 10.2.1 20210110 on Aug 25 2023 09:18:15 by root@0b77bb2e4da4. Sep 12 19:48:25 runner02.incandescent.tech docker[429556]: Sep 12 17:48:25 PowerDNS comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2. Sep 12 19:48:25 runner02.incandescent.tech docker[429556]: Sep 12 17:48:25 msg="Enabling IPv4 transport for outgoing queries" subsystem="config" level="0" prio="Notice" tid="0" ts="1694540905.330" Sep 12 19:48:25 runner02.incandescent.tech docker[429556]: Sep 12 17:48:25 msg="NOT using IPv6 for outgoing queries - add an IPv6 address (like '::') to query-local-address to enable" subsystem="config" level="0" prio="Warning" tid="0" ts="1694540905.330" Sep 12 19:48:25 runner02.incandescent.tech docker[429556]: Sep 12 17:48:25 msg="Setting access control" subsystem="config" level="0" prio="Info" tid="0" ts="1694540905.331" acl="allow-from" addresses="127.0.0.0/8 10.0.0.0/8 100.64.0.0/10 169.254.0.0/16 192.168.0.0/16 172.0.0.0/8 ::1/128 fc00::/7 fe80::/10" Sep 12 19:48:25 runner02.incandescent.tech docker[429556]: Sep 12 17:48:25 msg="Will not send queries to" subsystem="config" level="0" prio="Notice" tid="0" ts="1694540905.339" addresses="127.0.0.0/8 10.0.0.0/8 100.64.0.0/10 169.254.0.0/16 192.168.0.0/16 172.16.0.0/12 ::1/128 fc00::/7 fe80::/10 0.0.0.0/8 192.0.0.0/24 192.0.2.0/24 198.51.100.0/24 203.0.113.0/24 240.0.0.0/4 ::/96 ::ffff:0:0/96 100::/64 2001:db8::/32 0.0.0.0 ::" Sep 12 19:48:25 runner02.incandescent.tech docker[429556]: Sep 12 17:48:25 msg="Redirecting queries" subsystem="config" level="0" prio="Info" tid="0" ts="1694540905.339" addresses="192.168.2.72:8053" recursion="0" zone="svealiden.se" Sep 12 19:48:25 runner02.incandescent.tech docker[429556]: Sep 12 17:48:25 msg="Redirecting queries" subsystem="config" level="0" prio="Info" tid="0" ts="1694540905.339" addresses="192.168.2.72:8053" recursion="0" zone="incandescent.tech"
The highlighted section is my problem because I use 192.168.0.0/16 for my local network. Well, 192.168.0.0/21 actually but that is a strict subset of 192.168.0.0/16 – which I also believe makes 192.168.0.0/21 a partition from a set-theoretical perspective. But guess what? I run my pdns authoritative name servers on this network which pdns-recursor claims it will not send queries to – and it works fine!
I don’t know what they are referring to but can’t figure it out. I even looked in the source code to no avail. Anyway, it slowed down debugging by a few hours.