Re: filter-a and dns64 in a ipv6-only network

2023-01-31 Thread Thomas Schäfer
Am Montag, 30. Januar 2023, 23:12:53 CET schrieb Mark Andrews: > Do you want a correctly operating DNS64 server or do you want to filter > all A records? They are mutually exclusive requirements. Please read > RFC 6147 to understand why they are mutually exclusive. That's simply not true. RFC 61

Re: filter-a and dns64 in a ipv6-only network

2023-01-31 Thread Marco
Am 31.01.2023 um 19:52:11 Uhr schrieb Thomas Schäfer: > Am Montag, 30. Januar 2023, 23:12:53 CET schrieb Mark Andrews: > > Do you want a correctly operating DNS64 server or do you want to > > filter all A records? They are mutually exclusive requirements. > > Please read RFC 6147 to understand wh

Re: Gratuitous AXFRs of RPZ after 9.18.11

2023-01-31 Thread John Thurston
I was never able to uncover the underlying problem with that update. The only clue I had was the service remained in "activating" state, rather than "running". named was listening as expected, was transfering zone data, was caching and serving the correct data, but didn't seem to recognize it

Re: filter-a and dns64 in a ipv6-only network

2023-01-31 Thread Thomas Schäfer
Am Dienstag, 31. Januar 2023, 20:03:42 CET schrieb Marco: > > Why would it make sense to block them? Avoiding wrong decisions by "happy eyeballs" - probably the same rare reasons why isc introduced the filter yeas ago - in theory there is no reason to block nor A. But blocking A depe

Re: filter-a and dns64 in a ipv6-only network

2023-01-31 Thread Mark Andrews
> On 1 Feb 2023, at 05:52, Thomas Schäfer wrote: > > Am Montag, 30. Januar 2023, 23:12:53 CET schrieb Mark Andrews: >> Do you want a correctly operating DNS64 server or do you want to filter >> all A records? They are mutually exclusive requirements. Please read >> RFC 6147 to understand why

Re: filter-a and dns64 in a ipv6-only network

2023-01-31 Thread Eric Germann via bind-users
> On Jan 31, 2023, at 15:27, Thomas Schäfer wrote: > > Am Dienstag, 31. Januar 2023, 20:03:42 CET schrieb Marco: > >> >> Why would it make sense to block them? > > Avoiding wrong decisions by "happy eyeballs" - probably the same rare reasons > why isc introduced the filter yeas ago - in