I have strange things with Bind 9 (the pristine Debian package from
woody) and IPv6.

If I use listen-on-v6 (which unfortunately does not allow to listen
only to *some* IPv6 addresses), I have to change some ACLs. Otherwise:

Aug 12 12:02:42 eve named[8905]: client ::ffff:192.134.0.49#2577: zone transfer 
'eureg.org/IN' denied

Yes, I have to add ::ffff: for the ACLs of the services which use TCP
(like zone transfers) but not for the services which use UDP.

A request with dig +tcp:
Aug 12 15:20:29.304 queries: info: client ::ffff:192.134.4.114#32864: query: 
www.enst.fr IN A

A request with dig +notcp:
Aug 12 15:20:34.271 queries: info: client 192.134.4.114#32784: query: 
www.enst.fr IN A

Apparently, everything is fine with FreeBSD.

* Bind's fault or Linux kernel's fault? 

* Should I try the USAGI kernel?


Reply via email to