IPv6 Records on an IPv4 Network

Phil Mayers p.mayers at imperial.ac.uk
Thu Jul 22 17:58:01 UTC 2010


On 22/07/10 16:45, Alan Clegg wrote:
> On 7/22/2010 8:33 AM, Phil Mayers wrote:
>
>>> only IPv4 interface is enabled. If I put the option "filter-aaaa-on-v4
>>> {yes;};", will my DNS reject the AAAA queries?
>>
>> This option breaks DNSSEC.
>
> Actually, it doesn't.  If the DO bit is set in the query, the default
> behavior (I'll let you dig to find the knob that changes this) is to
> return the actual AAAA records without damaging them.

Ah yes:

filter-aaaa-on-v4 break-dnssec;

...breaks it!



More information about the bind-users mailing list