forced to execute DNS64

2016-10-10 Thread LEE SUKMOON
Hello, All. Many clients queries to IPv6(IN/) domain. But IPv6 network is so far, then slow then IPv4 network. I want to forced dns64 for special domain. Example, 'm.facebook.com' IN/ address is '2a03:2880:f115:83:face:b00c:0:25de'. But I don't want to use IPv6 address. So I want to use

RE: forced to execute DNS64

2016-10-11 Thread LEE SUKMOON
. > > If you want to force browsers to use IPv4 then send back RST to the > connection attempts to reach the facebook servers. They should fail over > to using IPv4. This should only require configuring the firewall on your > router appropriately. > > Mark > > In me

RE: forced to execute DNS64

2016-10-11 Thread LEE SUKMOON
// Facebook >}; > }; > > In message <389ab5475d0a441a9cc175f0326e5...@skt-tnetpmx2.skt.ad>, LEE > SUKMOON > writes: > > > > Thanks for reply. > > > > But a client's network is ipv6 network. > > Client obtains a ipv6 address

RE: forced to execute DNS64

2016-10-11 Thread LEE SUKMOON
a03:2880::/29 > netname:IE-FACEBOOK-201100822 > country:IE > org:ORG-FIL7-RIPE > admin-c:RD4299-RIPE > tech-c: RD4299-RIPE > status: ALLOCATED-BY-RIR > mnt-by: RIPE-NCC-HM-MNT > mnt-lower: fb-neteng > mnt-routes:

refused rcode is not working RPZ?

2016-11-16 Thread LEE SUKMOON
Hi all. I am using RPZ zone. Below line is rpz zone file. But jifr.net is not working. jifr.netCNAME . *.jifr.net CNAME . Unusual, this domain is responding with refused rcode. (from authority name server) $ dig @173.245.58.51 jifr.net ;;

RE: refused rcode is not working RPZ?

2016-11-16 Thread LEE SUKMOON
> On 17/11/2016 10:20, LEE SUKMOON wrote: > > > I want to response NXDOMAIN. > > Is it a solution this case? > > You'd usually get SERVFAIL from the recursor because the domain is > misconfigured with a lame delegation, and either way the client won't > g

How can limit recursive query on ipv6 network?

2017-01-03 Thread LEE SUKMOON
Hello. Our DNS Server has services on IPv6 network. Clients queries on ipv6 network. But recursive client query is only to use on ipv4 network. (DNS Server has not ipv6 network for foreign network.) So DNS server performs unnecessary a recursive client query for ipv6. How can limit recursive qu