DNS RPZ and different answers for IPv6 vs IPv4
Phil Mayers
p.mayers at imperial.ac.uk
Mon Feb 13 12:48:27 UTC 2012
On 13/02/12 12:42, John Hascall wrote:
>
> What I would like to have happen is for the IPv6 (AAAA) query
> for "evil-domain.com" to return "no data", but for the IPv4 (A)
> query for "evil-domain.com" to return "CNAME<our-walled-garden>".
>
> Is this possible? If so, how?
Maybe alias the name to a local name, then insert records for the local
name with only an A record:
evil-domain.com.<rpz domain> CNAME evil-domain-local.<your domain>
evil-domain-local.<your-domain> IN A 192.0.2.1
; no AAAA
More information about the bind-users
mailing list