From 1aebf94b7fb91b971ae3e40985361e95bc09ac17 Mon Sep 17 00:00:00 2001
From: Nate Riffe <inkblot@movealong.org>
Date: Fri, 29 Jan 2016 07:54:42 -0600
Subject: [PATCH 1/2] Release version 5.1.2

---
 metadata.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/metadata.json b/metadata.json
index 2e02cf2..6a7424e 100644
--- a/metadata.json
+++ b/metadata.json
@@ -1,6 +1,6 @@
 {
   "name": "inkblot/bind",
-  "version": "5.1.1",
+  "version": "5.1.2",
   "author": "inkblot",
   "license": "Apache-2.0",
   "summary": "ISC BIND name server",

From badd25b0e6197c0ac3aff03fb8febe8f046a37b8 Mon Sep 17 00:00:00 2001
From: Jean-Francois Roche <jfroche@affinitic.be>
Date: Wed, 20 Jan 2016 23:33:08 +0100
Subject: [PATCH 2/2] Add option to filter ipv6 address on ipv4

refs https://kb.isc.org/article/AA-00576/0/Filter-AAAA-option-in-BIND-9-.html
---
 manifests/init.pp        | 1 +
 templates/named.conf.erb | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/manifests/init.pp b/manifests/init.pp
index d38b3d7..334ec14 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -3,6 +3,7 @@
 class bind (
     $forwarders            = '',
     $dnssec                = true,
+    $filter_ipv6           = false,
     $version               = '',
     $rndc                  = undef,
     $statistics_port       = undef,
diff --git a/templates/named.conf.erb b/templates/named.conf.erb
index 4a20816..dfa595b 100644
--- a/templates/named.conf.erb
+++ b/templates/named.conf.erb
@@ -24,6 +24,9 @@ options {
 	auth-nxdomain <%= @auth_nxdomain ? 'yes' : 'no' %>;
 	listen-on-v6 { any; };
 	dnssec-enable <%= @dnssec ? 'yes' : 'no' %>;
+<%- if @filter_ipv6 -%>
+	filter-aaaa-on-v4 yes;
+<%- end -%>
 <%- if @dnssec -%>
 	dnssec-validation yes;
 	dnssec-lookaside auto;