<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
I did note that ipv6 world launch day was Jun 8<br>
<br>
<a class="moz-txt-link-freetext" href="http://www.worldipv6launch.org/">http://www.worldipv6launch.org/</a><br>
<br>
<br>
On 06/28/2012 10:52 AM, Gerald Waugh wrote:
<blockquote cite="mid:4FEC7DC3.9030708@frontstreetnetworks.com"
type="cite">
<meta http-equiv="Context-Type" content="text/html;
charset=ISO-8859-1">
On 06/28/2012 08:07 AM, Gerald Waugh wrote:
<blockquote cite="mid:4FEC5708.60608@frontstreetnetworks.com"
type="cite"> Named is filling the log files with errors from
ipv6 request<br>
<br>
<br>
named[25860]: network unreachable resolving
'sns.dialtelecom.cz/A/IN': 2001:628:453:420::48#53<br>
named[25860]: network unreachable resolving
'names.dialtelecom.cz/A/IN': 2001:628:453:420::48#53<br>
<br>
The other thing is that we have hundreds of dns request attempts
from European IP's<br>
We have this server setup as;<br>
<br>
options {<br>
directory "/var/named";<br>
// spoof version for a little more security via obscurity<br>
version "100.100.100";<br>
// no forwarders defined<br>
allow-transfer { 1.2.3.4; };<br>
allow-recursion { 1.2.3.0/24; };<br>
// recursion allowed<br>
};<br>
allow transfer is the secondary dns server<br>
allow recursion is the home network<br>
<br>
/etc/sysconfig/network<br>
NETWORKING_IPV6=n</blockquote>
<br>
Blocked most of the European country IPs using the pfsense
firewall "Country Block" add-on,<br>
and thing have quieted down.<br>
<br>
Gerald<br>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Gerald Waugh
Front Street Networks - RaQware
4604 Fern Ave
Shreveport, LA 71105
PH: +1 318-734-4779
CL: +1 318-401-0428
</pre>
</body>
</html>