Problem with rfc7706 config
Tuomo Soini
tis at foobar.fi
Mon Apr 8 12:25:56 UTC 2019
On Mon, 8 Apr 2019 14:14:26 +0300
Tuomo Soini via Unbound-users <unbound-users at nlnetlabs.nl> wrote:
> I have a system which has IPv4 connectivity only.
>
> # This is rfc7706 config
> # https://www.dns.icann.org/services/axfr/
> auth-zone:
> name: "."
> for-downstream: no
> for-upstream: yes
> fallback-enabled: yes
> zonefile: /var/lib/unbound/root.zone
> master: lax.xfr.dns.icann.org.
> master: iad.xfr.dns.icann.org.
>
> Problem is there will not be zonexfer of zone. My guess is unbound
> only tries ipv6 addresses of masters. When dns name is used,
> I'd expect unbound to use both IPv4 and IPv6 addresses for axfr when
> server name has both addresses.
>
Config works just fine on systems with IPv6 connectivity. In fact I
guess unbound shouldn't even try to use ipv6 for zonexfer when host
doesn't have global ipv6 address.
--
Tuomo Soini <tis at foobar.fi>
Foobar Linux services
+358 40 5240030
Foobar Oy <https://foobar.fi/>
More information about the Unbound-users
mailing list