On 13/02/12 12:42, John Hascall wrote:

What I would like to have happen is for the IPv6 (AAAA) query
for "evil-domain.com" to return "no data", but for the IPv4 (A)
query for "evil-domain.com" to return "CNAME<our-walled-garden>".

Is this possible?  If so, how?

Maybe alias the name to a local name, then insert records for the local name with only an A record:

evil-domain.com.<rpz domain> CNAME evil-domain-local.<your domain>

evil-domain-local.<your-domain> IN A 192.0.2.1
; no AAAA
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to