Questions about DNS64 operation

Mark Andrews marka at isc.org
Thu Nov 30 04:21:28 UTC 2017


Why is preventing 127.0.0.1 being mapped to a AAAA not enough? 
Why do you want it mapped to ::1?  Such a mapping is NOT part of DNS64.

> On 30 Nov 2017, at 3:04 pm, Sukmoon Lee <smlee at sk.com> wrote:
> 
>> 
>> Why not just exclude 127.0.0.1 and not map to AAAA at all?
> 
> 
> If it is answer 127.0.0.1 for test.com/IN/A in an IPv4, the client will not attempt to connect to the network (only attempt to connect to loopback).
> 
> However, if it is query test.com/IN/AAAA in an IPv6, DNS64 will answer 64:ff9b::7f00:1 address. (dns64 prefix is 64:ff9b::/96).
> 
> Then, the client will attempt to connect to 64:ff9b::7f00:1(NAT64).
> 
> I want to prevent the client from attempting to network up to NAT64.
> 
> So I want to reply 127.0.0.1 to ::1 in DNS64.
> 
> And I was using to below option. But this is not what I want.
> 
> 	dns64 64:ff9b::/96 {
> 		...
> 		mapped { !127/8; any; };
> 	}
> 
> Thanks.
> 
> 
> 
> 
> 
>> 
>>> On 29 Nov 2017, at 7:32 pm, Sukmoon Lee <smlee at sk.com> wrote:
>>> 
>>> Hello.
>>> 
>>> I testing DNS64 using 64:ff9b::/96(prefix).
>>> Some domain(IN/A) is responses to 127.0.0.1/IN/A.
>>> Under DNS64, this domain(IN/AAAA) is working 64:ff9b::7f00:1.
>>> 
>>> I want to response ::1 under DNS64.
>>> Is there any way?
>>> 
>>> Thanks.
>>> _______________________________________________
>>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
>> unsubscribe from this list
>>> 
>>> bind-users mailing list
>>> bind-users at lists.isc.org
>>> https://lists.isc.org/mailman/listinfo/bind-users
>> 
>> --
>> Mark Andrews, ISC
>> 1 Seymour St., Dundas Valley, NSW 2117, Australia
>> PHONE: +61 2 9871 4742              INTERNET: marka at isc.org
> 

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka at isc.org



More information about the bind-users mailing list