Add option to filter ipv6 address on ipv4

refs https://kb.isc.org/article/AA-00576/0/Filter-AAAA-option-in-BIND-9-.html
This commit is contained in:
Jean-Francois Roche 2016-01-20 23:33:08 +01:00 committed by Nate Riffe
parent 1aebf94b7f
commit badd25b0e6
2 changed files with 4 additions and 0 deletions

View File

@ -3,6 +3,7 @@
class bind (
$forwarders = '',
$dnssec = true,
$filter_ipv6 = false,
$version = '',
$rndc = undef,
$statistics_port = undef,

View File

@ -24,6 +24,9 @@ options {
auth-nxdomain <%= @auth_nxdomain ? 'yes' : 'no' %>;
listen-on-v6 { any; };
dnssec-enable <%= @dnssec ? 'yes' : 'no' %>;
<%- if @filter_ipv6 -%>
filter-aaaa-on-v4 yes;
<%- end -%>
<%- if @dnssec -%>
dnssec-validation yes;
dnssec-lookaside auto;