forced to execute DNS64

Mark Andrews marka at isc.org
Tue Oct 11 23:47:06 UTC 2016


I don't understand why you are saying "But /29 prefix is not work."
FaceBook is 2a03:2880::/29 and the acl code should handle this.

Mark

[rock:~/git/bind9/xxxxxx] marka% whois -r 2a03:2880::
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '2a03:2880::/29'

% Abuse contact for '2a03:2880::/29' is 'domain at fb.com'

inet6num:       2a03:2880::/29
netname:        IE-FACEBOOK-201100822
country:        IE
org:            ORG-FIL7-RIPE
admin-c:        RD4299-RIPE
tech-c:         RD4299-RIPE
status:         ALLOCATED-BY-RIR
mnt-by:         RIPE-NCC-HM-MNT
mnt-lower:      fb-neteng
mnt-routes:     fb-neteng
created:        2015-09-24T12:59:37Z
last-modified:  2016-04-14T10:48:51Z
source:         RIPE # Filtered

In message <0171a9ab70c54918ab355dc66dda3205 at skt-tnetpmx2.SKT.AD>, LEE SUKMOON 
writes:
> Thank you.
>
> Your advice is very well done. Thank you again.
> But /29 prefix is not work. /32 prefix is good work.
>
>
>     dns64 64:ff9b::/96 {
>         clients { acl_ipv6; ::1; };
>         exclude {
>             2a03:2880::/32; // Facebook
>         };
>     };
>
> root at DNS_STG:/root $ dig @::1 m.facebook.com aaaa +short
> star-mini.c10r.facebook.com.
> 64:ff9b::1f0d:4423
> root at DNS_STG:/root $ dig @::1 m.facebook.com aaaa +short
> star-mini.c10r.facebook.com.
> 64:ff9b::1f0d:4423
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org


More information about the bind-users mailing list