3

Is it possible to block AAAA answers being sent back to clients from a local dns server, but only for certain forward dns domains? I know I can do the filtering based on ipv6 subnet (working sample below), but i would like to filter out based on domain.

I.e. google services (1e100.net domain) are much faster over ipv4 transport, yet i'd still like to have ipv6 for everything else.

;this RPZ entry successfully blocks AAAA answers that match 2001:db8:aa::/48
48.zz.aa.db8.2001.rpz-ip       IN      CNAME   .

My local DNS server in question is running bind 9.9.5

vobelic
  • 343

0 Answers0