DNS RPZ and different answers for IPv6 vs IPv4

Phil Mayers p.mayers at imperial.ac.uk
Mon Feb 13 12:48:27 UTC 2012

On 13/02/12 12:42, John Hascall wrote:
> What I would like to have happen is for the IPv6 (AAAA) query
> for "evil-domain.com" to return "no data", but for the IPv4 (A)
> query for "evil-domain.com" to return "CNAME<our-walled-garden>".
> Is this possible?  If so, how?

Maybe alias the name to a local name, then insert records for the local 
name with only an A record:

evil-domain.com.<rpz domain> CNAME evil-domain-local.<your domain>

evil-domain-local.<your-domain> IN A
; no AAAA

More information about the bind-users mailing list