compile flag to disable AAAA responses is unrecognized
Mark Andrews
marka at isc.org
Tue Jul 6 23:57:48 UTC 2021
AAAA filtering is now a plug-in (as of 9.14). This is documented in the ARM.
> On 7 Jul 2021, at 05:05, Scott Strattner <sstrattn at us.ibm.com> wrote:
>
> I successfully built 9.16.18 on my RH8.4 ppc64el VM. But after doing so I wanted to set it up so that if it receives a query over IPv4 it will not return any AAAA records in the reply.
>
> I found this: https://kb.isc.org/docs/aa-00576
>
> Which mentions using --enable-filter-aaaa and then applying the right option in named.conf. However when I added this to my configure flags, it says it is not recognized (see below).
>
> What is the current way to enforce this behavior? I tried adding the "filter-aaaa-on-v4 yes;" in named.conf (perhaps that compile option was now enabled by default?) but did not work (queries still return both A and AAAA results).
>
> Configuration summary:
> -------------------------------------------------------------------------------
> Optional features enabled:
> GSS-API (--with-gssapi)
> Allow 'fixed' rrset-order (--enable-fixed-rrset)
> Print backtrace on crash (--enable-backtrace)
> Use symbol table for backtrace, named only (--enable-symtable)
> Use GNU libtool (--with-libtool)
> CMocka Unit Testing Framework (--with-cmocka)
> DNSSEC validation active by default (--enable-auto-validation)
> Dynamically loadable zone (DLZ) drivers:
> Filesystem (--with-dlz-filesystem)
> -------------------------------------------------------------------------------
> Features disabled or unavailable on this platform:
> Small-system tuning (--with-tuning)
> Allow 'dnstap' packet logging (--enable-dnstap)
> GeoIP2 access control (--enable-geoip)
> DNS Response Policy Service interface (--enable-dnsrps)
> Using PKCS#11 for Public-Key Cryptography (--with-native-pkcs11)
> Very verbose query trace logging (--enable-querytrace)
> IDN support (--with-libidn2)
> -------------------------------------------------------------------------------
> Configured paths:
> prefix: /usr/local
> sysconfdir: ${prefix}/etc
> localstatedir: ${prefix}/var
> -------------------------------------------------------------------------------
> Compiler: gcc
> gcc (GCC) 8.4.1 20200928 (Red Hat 8.4.1-1)
> Copyright (C) 2018 Free Software Foundation, Inc.
> This is free software; see the source for copying conditions. There is NO
> warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
> Unrecognized options:
> --enable-filter-aaaa
> Scott Strattner
>
>
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
>
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
>
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
More information about the bind-users
mailing list