diff --git a/manifests/init.pp b/manifests/init.pp
index d38b3d7..334ec14 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -3,6 +3,7 @@
 class bind (
     $forwarders            = '',
     $dnssec                = true,
+    $filter_ipv6           = false,
     $version               = '',
     $rndc                  = undef,
     $statistics_port       = undef,
diff --git a/templates/named.conf.erb b/templates/named.conf.erb
index 4a20816..dfa595b 100644
--- a/templates/named.conf.erb
+++ b/templates/named.conf.erb
@@ -24,6 +24,9 @@ options {
 	auth-nxdomain <%= @auth_nxdomain ? 'yes' : 'no' %>;
 	listen-on-v6 { any; };
 	dnssec-enable <%= @dnssec ? 'yes' : 'no' %>;
+<%- if @filter_ipv6 -%>
+	filter-aaaa-on-v4 yes;
+<%- end -%>
 <%- if @dnssec -%>
 	dnssec-validation yes;
 	dnssec-lookaside auto;