Disabling IPv6 lookups in bind > 개발

Just disabling bind to listen on IPv6 addresses does not prevents it from querying for IPv6 addresses to remote hosts. To ensure that IPv6 is completely disabled use:

1. Edit /etc/sysconfig/named and set
OPTIONS="-4"

2. Edit '/etc/named.conf' and set
filter-aaaa-on-v4 yes;

Also optionally comment 'listen-on-v6 port 53 { ::1; };'

3. Finally use 'service named restart'


Some of this has been learned from https://kb.isc.org/article/AA-00576/0/Filter-AAAA-option-in-BIND-9-.html



* 참
https://www.sbarjatiya.com/notes_wiki/index.php/Disabling_IPv6_lookups_in_bind

추천0