On Tue, 29 May 2012 19:33:59 +0200
Per Jessen
Carl Hartung wrote:
On Tue, 29 May 2012 17:52:15 +0200 Per Jessen
wrote: Carl Hartung wrote:
On Tue, 29 May 2012 16:59:22 +0200 "Carlos E. R."
wrote: <snipped>
What I want is simply that when something searches for an address, the answer should not include an IPv6 address, no matter what.
Got it now, thanks! :-)
Edit named.conf, change "any" to "none" for item 'listen-on-v6 port 53':
options { listen-on port 53 { any; }; - - - - - 8< - - - - - listen-on-v6 port 53 { none; - - - - - 8< - - - - - };
restart bind
That doesn't do it, unfortunately. That only controls if bind should receive queries from IPv6 networks, not whether it should not return AAAA records.
Pardon my denseness and I'm certainly not an expert, but doesn't restricting the server to operating in 'IPv4 only' mode cause it to only return IPv4 addresses? How can it return IPv6 responses via port 53 in the IPv4 address space (without tunneling)?
We're not talking about responses going over IPv6, but about responses with AAAA DNS records (which happen to be IPv6 addresses). The actual communication might happen over IPv4, -5 or -6 or even carrier pigeon (RFC1149). :-)
I get this part, Per. I really do - at least I /thought/ I did. This explains why, when I run a query via cli from my IPv4 network, I get back a listing containing both addresses (if the IPv6 address exists.) But that's a diagnostic procedure, right? It isn't an exact replacement for the 'live' transaction that occurs between, say, a browser on an IPv4 network and a DNS server configured for, and residing on, an IPv6 network, right? IOW, in everyday operation, if a request arrives at an IPv6 enabled server on IPv4 port 53, the fact that it arrives at the IPv4 address results in the IPv4 address, alone, being returned - the rational being it is presumed that the client is unable to use the IPv6 address. Am I way out past left field here today? :-) -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org