What's the pfSense situation with IPv6 in packages?

----- Forwarded message from John Levine <[email protected]> -----

From: John Levine <[email protected]>
Date: 17 Oct 2012 14:25:36 -0000
To: [email protected]
Subject: Re: Please, talk me down.
Organization: 

In article <[email protected]> you write:
>I want to like IPv6. I do. But I'm seriously considering turning off
>IPv6 support from our servers.
>
>First off, I'm using djbdns internally and it doesn't support AAAA
>records. So we really aren't using it internally.

I'm a long time djbdns user.  But about a year ago, I switched from
using dnscache to unbound for my cache, because it does useful stuff
that dnscache doesn't do.  I had a bunch of wacky local stuff
configured into dnscache, like querying local servers for local-only
domains, and substituting a local reject-all for some nasty outside
domains, and it took about an hour to figure out how to do it all with
unbound.  I run it under daemontools.

My authoritative servers are still tinydns, even though I do support
IPv6.  Since tinydns-data compiles stuff from a text source file, I
have a perl script that translates lines with AAAA records in a normal
format into the escape codes that tinydns uses for arbitrary record
types.  It's gross, but it works.

So anyway, use unbound for your cache, no need to change away from
tinydns unless you want to use DNSSEC, which it'll never support.

-- 
Regards,
John Levine, [email protected], Primary Perpetrator of "The Internet for Dummies",
Please consider the environment before reading this e-mail. http://jl.ly

----- End forwarded message -----
-- 
Eugen* Leitl <a href="http://leitl.org";>leitl</a> http://leitl.org
______________________________________________________________
ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE
_______________________________________________
List mailing list
[email protected]
http://lists.pfsense.org/mailman/listinfo/list

Reply via email to