[dnsdist] no ipv6 connectivity

Remi Gacogne remi.gacogne at powerdns.com
Fri Jan 7 08:12:32 UTC 2022


Hi Larry,

On 06/01/2022 18:16, Larry Wapnitsky via dnsdist wrote:
> I've set up dnsdist in my lab to forward to my dns servers, running powerdns
> 
> If I do nslookup directly to the ipv6 addresses on the name servers, I 
> can resolve.
> 
> If I try to resolve via dnsdist, I get no connection.
> 
> Here is my config, modified to avoid public addresses:
> 
> setLocal('10.150.33.2')
> addLocal('2001:xxx:xxxx:33::2')

Did you change the default ACL? It allows 10.0.0.0/8 but only a few IPv6 
prefixes:
- ::1/128
- fc00::/7
- fe80::/10

https://dnsdist.org/advanced/acl.html

Best regards,
-- 
Remi Gacogne
PowerDNS.COM BV - https://www.powerdns.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.powerdns.com/pipermail/dnsdist/attachments/20220107/3d763b80/attachment.sig>


More information about the dnsdist mailing list