Re: BIND 9.11.5-P4 can't do ipv6 recursion

2019-03-18 Thread Crist Clark
Local firewall rules on the server? Did you have to make any firewall
changes for IPv4? Did you do the same for IPv6?

On Mon, Mar 18, 2019 at 10:20 PM Mark Andrews  wrote:
>
> On the server run "dig version.bind txt ch @::1”.  This should get a response 
> and
> work from there.  e.g. "dig version.bind txt ch @other_addresses”, then try 
> from
> different machines.  Named has had IPv6 support for 2 decades now.  The 
> problem
> will almost certainly be with the environment not the server.
>
> > On 19 Mar 2019, at 2:33 pm, celia <66183...@qq.com> wrote:
> >
> > Hello ALL,
> >  I set up a  recursion DNS in our college. It works well in ipv4 
> > request,but can not resolve ipv6 request. The named.conf file is as follows:
> >
> > acl "trusted"{202.115.253.0/24;202.112.16.0/24;202.112.14.0/23;};
> > acl "ipv6" {2001:da8:6000::/48;};
> >
> > options{
> > directory "/usr/local/named/etc/";
> > pid-file "/var/run/named/named.pid";
> > statistics-file "/var/named/data/named_stats.txt";
> >
> > listen-on-v6 {any;};
> > recursion yes;
> > allow-recursion {trusted;ipv6;};
> > recursive-clients 2;
> > tcp-clients 500;
> > allow-query-cache {trusted;ipv6;};
> > dump-file "/var/named/data/cache_dump.db";
> > };
> >  I have tried some methods to solve this problem,such as stop the firewall, 
> > chanege "listen-on-v6"option to "listen-on-v6{my ipv6 address;}",it does 
> > not work. i can ping my DNS'ipv6 address,but when using lookup,it shows 
> > time out ...
> > the system log shows :listening on IPv6 interfaces,port 53,but i am sure 
> > port 53 does not response the request.
> >
> > thanks for help
> > best regards
> > celia
> > 2019-03-19
> >
> > ___
> > Please visit https://lists.isc.org/mailman/listinfo/bind-users to 
> > unsubscribe from this list
> >
> > bind-users mailing list
> > bind-users@lists.isc.org
> > https://lists.isc.org/mailman/listinfo/bind-users
>
> --
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742  INTERNET: ma...@isc.org
>
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
> from this list
>
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: BIND 9.11.5-P4 can't do ipv6 recursion

2019-03-18 Thread Mark Andrews
On the server run "dig version.bind txt ch @::1”.  This should get a response 
and
work from there.  e.g. "dig version.bind txt ch @other_addresses”, then try from
different machines.  Named has had IPv6 support for 2 decades now.  The problem
will almost certainly be with the environment not the server.

> On 19 Mar 2019, at 2:33 pm, celia <66183...@qq.com> wrote:
> 
> Hello ALL,
>  I set up a  recursion DNS in our college. It works well in ipv4 
> request,but can not resolve ipv6 request. The named.conf file is as follows:
> 
> acl "trusted"{202.115.253.0/24;202.112.16.0/24;202.112.14.0/23;};
> acl "ipv6" {2001:da8:6000::/48;};
> 
> options{
> directory "/usr/local/named/etc/";
> pid-file "/var/run/named/named.pid";
> statistics-file "/var/named/data/named_stats.txt";
>  
> listen-on-v6 {any;}; 
> recursion yes;
> allow-recursion {trusted;ipv6;};
> recursive-clients 2;
> tcp-clients 500;
> allow-query-cache {trusted;ipv6;};
> dump-file "/var/named/data/cache_dump.db";
> };
>  I have tried some methods to solve this problem,such as stop the firewall, 
> chanege "listen-on-v6"option to "listen-on-v6{my ipv6 address;}",it does not 
> work. i can ping my DNS'ipv6 address,but when using lookup,it shows time out 
> ...
> the system log shows :listening on IPv6 interfaces,port 53,but i am sure port 
> 53 does not response the request. 
> 
> thanks for help
> best regards
> celia
> 2019-03-19
> 
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
> from this list
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742  INTERNET: ma...@isc.org

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


BIND 9.11.5-P4 can't do ipv6 recursion

2019-03-18 Thread celia
Hello ALL,
 I set up a  recursion DNS in our college. It works well in ipv4 
request,but can not resolve ipv6 request. The named.conf file is as follows:


acl "trusted"{202.115.253.0/24;202.112.16.0/24;202.112.14.0/23;};
acl "ipv6" {2001:da8:6000::/48;};


options{
directory "/usr/local/named/etc/";
pid-file "/var/run/named/named.pid";
statistics-file "/var/named/data/named_stats.txt";
 
listen-on-v6 {any;};  
recursion yes;
allow-recursion {trusted;ipv6;};
recursive-clients 2;
tcp-clients 500;
allow-query-cache {trusted;ipv6;};
dump-file "/var/named/data/cache_dump.db";
};

 I have tried some methods to solve this problem,such as stop the firewall, 
chanege "listen-on-v6"option to "listen-on-v6{my ipv6 address;}",it does not 
work. i can ping my DNS'ipv6 address,but when using lookup,it shows time out ...
the system log shows :listening on IPv6 interfaces,port 53,but i am sure port 
53 does not response the request. 


thanks for help
best regards
celia
2019-03-19___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users