<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 06/28/2012 08:07 AM, Gerald Waugh wrote:
<blockquote cite="mid:4FEC5708.60608@frontstreetnetworks.com"
type="cite">
<meta http-equiv="Context-Type" content="text/html;
charset=ISO-8859-1">
Named is filling the log files with errors from ipv6 request<br>
<br>
<br>
named[25860]: network unreachable resolving
'sns.dialtelecom.cz/A/IN': 2001:628:453:420::48#53<br>
named[25860]: network unreachable resolving
'names.dialtelecom.cz/A/IN': 2001:628:453:420::48#53<br>
<br>
The other thing is that we have hundreds of dns request attempts
from European IP's<br>
We have this server setup as;<br>
<br>
options {<br>
directory "/var/named";<br>
// spoof version for a little more security via obscurity<br>
version "100.100.100";<br>
// no forwarders defined<br>
allow-transfer { 1.2.3.4; };<br>
allow-recursion { 1.2.3.0/24; };<br>
// recursion allowed<br>
};<br>
allow transfer is the secondary dns server<br>
allow recursion is the home network<br>
<br>
/etc/sysconfig/network<br>
NETWORKING_IPV6=n</blockquote>
<br>
Blocked most of the European country IPs using the pfsense firewall
"Country Block" add-on,<br>
and thing have quieted down.<br>
<br>
Gerald<br>
</body>
</html>