Add option to filter ipv6 address on ipv4
refs https://kb.isc.org/article/AA-00576/0/Filter-AAAA-option-in-BIND-9-.html
This commit is contained in:
parent
1aebf94b7f
commit
badd25b0e6
@ -3,6 +3,7 @@
|
||||
class bind (
|
||||
$forwarders = '',
|
||||
$dnssec = true,
|
||||
$filter_ipv6 = false,
|
||||
$version = '',
|
||||
$rndc = undef,
|
||||
$statistics_port = undef,
|
||||
|
||||
@ -24,6 +24,9 @@ options {
|
||||
auth-nxdomain <%= @auth_nxdomain ? 'yes' : 'no' %>;
|
||||
listen-on-v6 { any; };
|
||||
dnssec-enable <%= @dnssec ? 'yes' : 'no' %>;
|
||||
<%- if @filter_ipv6 -%>
|
||||
filter-aaaa-on-v4 yes;
|
||||
<%- end -%>
|
||||
<%- if @dnssec -%>
|
||||
dnssec-validation yes;
|
||||
dnssec-lookaside auto;
|
||||
|
||||
Loading…
Reference in New Issue
Block a user