Questions about DNS64 operation

Sukmoon Lee smlee at sk.com
Thu Nov 30 04:04:16 UTC 2017


> 
> Why not just exclude 127.0.0.1 and not map to AAAA at all?


If it is answer 127.0.0.1 for test.com/IN/A in an IPv4, the client will not attempt to connect to the network (only attempt to connect to loopback).

However, if it is query test.com/IN/AAAA in an IPv6, DNS64 will answer 64:ff9b::7f00:1 address. (dns64 prefix is 64:ff9b::/96).

Then, the client will attempt to connect to 64:ff9b::7f00:1(NAT64).

I want to prevent the client from attempting to network up to NAT64.

So I want to reply 127.0.0.1 to ::1 in DNS64.

And I was using to below option. But this is not what I want.

	dns64 64:ff9b::/96 {
		...
		mapped { !127/8; any; };
	}

Thanks.





> 
> > On 29 Nov 2017, at 7:32 pm, Sukmoon Lee <smlee at sk.com> wrote:
> >
> > Hello.
> >
> > I testing DNS64 using 64:ff9b::/96(prefix).
> > Some domain(IN/A) is responses to 127.0.0.1/IN/A.
> > Under DNS64, this domain(IN/AAAA) is working 64:ff9b::7f00:1.
> >
> > I want to response ::1 under DNS64.
> > Is there any way?
> >
> > Thanks.
> > _______________________________________________
> > Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
> >
> > bind-users mailing list
> > bind-users at lists.isc.org
> > https://lists.isc.org/mailman/listinfo/bind-users
> 
> --
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742              INTERNET: marka at isc.org



More information about the bind-users mailing list