diff --git a/manifests/init.pp b/manifests/init.pp
index 87698dc..601ef93 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -3,6 +3,7 @@
 class bind (
     $forwarders            = '',
     $dnssec                = true,
+    $filter_ipv6           = false,
     $version               = '',
     $rndc                  = undef,
     $statistics_port       = undef,
diff --git a/metadata.json b/metadata.json
index 2e02cf2..6a7424e 100644
--- a/metadata.json
+++ b/metadata.json
@@ -1,6 +1,6 @@
 {
   "name": "inkblot/bind",
-  "version": "5.1.1",
+  "version": "5.1.2",
   "author": "inkblot",
   "license": "Apache-2.0",
   "summary": "ISC BIND name server",
diff --git a/templates/named.conf.erb b/templates/named.conf.erb
index 4a20816..dfa595b 100644
--- a/templates/named.conf.erb
+++ b/templates/named.conf.erb
@@ -24,6 +24,9 @@ options {
 	auth-nxdomain <%= @auth_nxdomain ? 'yes' : 'no' %>;
 	listen-on-v6 { any; };
 	dnssec-enable <%= @dnssec ? 'yes' : 'no' %>;
+<%- if @filter_ipv6 -%>
+	filter-aaaa-on-v4 yes;
+<%- end -%>
 <%- if @dnssec -%>
 	dnssec-validation yes;
 	dnssec-lookaside auto;