Carlos E. R. wrote:
On 2015-10-07 15:51, Per Jessen wrote:
Yamaban wrote:
IMHO a clear answer (NXDOMAIN) is better than blocking / dropping / ignoring a "AAAA" request. Less timeouts, and a defined behaviour. I guess I don't quite appreciate when this would be required, but yes, any clear answer is better than no answer, absolutely. Still, it doesn't seem to me to be a job for the nameserver to determine what is good for the application or not. Well, it is a convenient hack, in the hands of the administrator :-)
Yes, we could configure on each application that supports it to use only IPv6, but many do not have it. The available "hack" when everything else fails (using gai.conf, etc) we use is disable IPv6 support via kernel switch, systemwide. One problem with gai.conf is, that this file will not be changed dynamically by DHCP. So mobile laptop users have to change it manually, if they change the network and if the IPv4/IPv6 connectivity changes.
To avoid IPv6 timeouts it can be a solution to add a "reject" default route for IPv6. What is the correct syntax for this? (In IPv4 I can add reject routes like this: "route add -net 172.16.0.0 netmask 255.240.0.0 reject" (rejects all traffic to the 172.168.0.0/255.240.0.0 network)) Greetings, Björn -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org