allowing queries from all IPv4 addresses but only a range of IPv6 addresses

David Forrest drf at
Tue May 31 10:54:34 UTC 2011

On Tue, 31 May 2011, Dennis Perisa wrote:

> Hello community,
> I have a requirement to configure BIND 9.7.3 to allow queries from any
> IPv4 address and only a specific IPv6 prefix.
> The allow-query statement takes an address match list as argument, but
> I'm not sure how I can specify 'any IPv4 host' without having to use
> the 'any' keyword (which matches on ALL IPv4 and IPv6 addresses).
> Hoping you can help,
> Dennis

Dennis, how about:

acl some-nets	{;		// all IPv4
 		2001:470:1f11:7d0::/64;	// our IPV6 prefix


match-clients	{ some-nets; };



David Forrest 
Maple Park Development Corporation 
St. Louis, Missouri

More information about the bind-users mailing list