Difference between revisions of "Disabling IPv6 lookups in bind"

From Notes_Wiki
m
m
Line 13: Line 13:
#:Also optionally comment '<tt>listen-on-v6 port 53 { ::1; };</tt>'
#:Also optionally comment '<tt>listen-on-v6 port 53 { ::1; };</tt>'
#Finally use '<tt>service named restart</tt>'
#Finally use '<tt>service named restart</tt>'
Some of this has been learned from https://kb.isc.org/article/AA-00576/0/Filter-AAAA-option-in-BIND-9-.html

Revision as of 13:23, 7 September 2015

<yambe:breadcrumb>Bind_DNS_server_configuration|Bind DNS</yambe:breadcrumb>

Disabling IPv6 lookups in bind

Just disabling bind to listen on IPv6 addresses does not prevents it from querying for IPv6 addresses to remote hosts. To ensure that IPv6 is completely disabled use:

  1. Edit /etc/sysconfig/named and set
    OPTIONS="-4"
  2. Edit '/etc/named.conf' and set
    filter-aaaa-on-v4 yes;
    Also optionally comment 'listen-on-v6 port 53 { ::1; };'
  3. Finally use 'service named restart'


Some of this has been learned from https://kb.isc.org/article/AA-00576/0/Filter-AAAA-option-in-BIND-9-.html