Re: Proxy requests but filter out IPv4 address
RPZ should be able to do that. Read up on RPZ in the BIND manual, and search online for more info. -- Bob Harold On Fri, Aug 19, 2022 at 2:56 AM Matthias Fechner wrote: > Dear all, > > I'm not sure if bind can do this, but let me explain what I would like > to do. > > It is a hostname from a foreign domain, like: > test.myfritz.net > > it is returning an IPv4 and IPv6 address: > host test.myfritz.net > test.myfritz.net has address 100.91.114.161 > test.myfritz.net has IPv6 address 2a02:6d40:17:9dc7:e228:6dff:fe8d:1f41 > > The IPv4 address will not work due to carrier-nat, so only the IPv6 > address would be reachable from outside. > > Is there a way to configure bind that if I resolve test.myfritz.net (it > must not be under the domain myfritz.net, but can also be in a way > aliased to a domain I own) that it only returns the IPv6 address but > totally skip the IPv4 address? > The IPv4 and IPv6 addresses are not permanent and change at least once a > day. > > > Gruß > Matthias > > -- > > "Programming today is a race between software engineers striving to > build bigger and better idiot-proof programs, and the universe trying to > produce bigger and better idiots. So far, the universe is winning." -- > Rich Cook > > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support > subscriptions. Contact us at https://www.isc.org/contact/ for more > information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users > -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Proxy requests but filter out IPv4 address
Hi Matthias. In DNS there are many record types. For IP addresses there are two types: A for IPv4 addresses and for IPv6 addresses. If your client asks for the record it should get only IPv6 addresses. So what is your client asking for? Can you show us a real example where both IPv4 and IPv6 addresses are being returned? pcap would be best. Cheers, Greg On Fri, 19 Aug 2022 at 07:56, Matthias Fechner wrote: > Dear all, > > I'm not sure if bind can do this, but let me explain what I would like > to do. > > It is a hostname from a foreign domain, like: > test.myfritz.net > > it is returning an IPv4 and IPv6 address: > host test.myfritz.net > test.myfritz.net has address 100.91.114.161 > test.myfritz.net has IPv6 address 2a02:6d40:17:9dc7:e228:6dff:fe8d:1f41 > > The IPv4 address will not work due to carrier-nat, so only the IPv6 > address would be reachable from outside. > > Is there a way to configure bind that if I resolve test.myfritz.net (it > must not be under the domain myfritz.net, but can also be in a way > aliased to a domain I own) that it only returns the IPv6 address but > totally skip the IPv4 address? > The IPv4 and IPv6 addresses are not permanent and change at least once a > day. > > > Gruß > Matthias > > -- > > "Programming today is a race between software engineers striving to > build bigger and better idiot-proof programs, and the universe trying to > produce bigger and better idiots. So far, the universe is winning." -- > Rich Cook > > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support > subscriptions. Contact us at https://www.isc.org/contact/ for more > information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users > -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Proxy requests but filter out IPv4 address
Dear all, I'm not sure if bind can do this, but let me explain what I would like to do. It is a hostname from a foreign domain, like: test.myfritz.net it is returning an IPv4 and IPv6 address: host test.myfritz.net test.myfritz.net has address 100.91.114.161 test.myfritz.net has IPv6 address 2a02:6d40:17:9dc7:e228:6dff:fe8d:1f41 The IPv4 address will not work due to carrier-nat, so only the IPv6 address would be reachable from outside. Is there a way to configure bind that if I resolve test.myfritz.net (it must not be under the domain myfritz.net, but can also be in a way aliased to a domain I own) that it only returns the IPv6 address but totally skip the IPv4 address? The IPv4 and IPv6 addresses are not permanent and change at least once a day. Gruß Matthias -- "Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the universe trying to produce bigger and better idiots. So far, the universe is winning." -- Rich Cook -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
