Skip to content
Snippets Groups Projects
Verified Commit 75e5f672 authored by Tom Herbers's avatar Tom Herbers Committed by Vladimír Čunát
Browse files

modules/dns64: add recommendation to also disable DNS64 via IPv4

It's resonable to assume that people would also want to disable DNS64 for
IPv4 source addresses if they only enable it for some IPv6 sources.

Close https://github.com/CZ-NIC/knot-resolver/pull/83
parent da93abb0
Branches
Tags
1 merge request!1349modules/dns64: add recomendation to also disable DNS64 via IPv4
Pipeline #105302 canceled with stages
in 4 seconds
......@@ -52,8 +52,11 @@ you can set ``DNS64_DISABLE`` flag via the :ref:`view module <mod-view>`.
.. code-block:: lua
modules = { 'dns64', 'view' }
-- Disable dns64 for everyone, but re-enable it for two particular subnets.
-- disable dns64 for all IPv4 source addresses
view:addr('0.0.0.0/0', policy.all(policy.FLAGS('DNS64_DISABLE')))
-- disable dns64 for all IPv6 source addresses
view:addr('::/0', policy.all(policy.FLAGS('DNS64_DISABLE')))
-- re-enable dns64 for two IPv6 subnets
view:addr('2001:db8:11::/48', policy.all(policy.FLAGS(nil, 'DNS64_DISABLE')))
view:addr('2001:db8:93::/48', policy.all(policy.FLAGS(nil, 'DNS64_DISABLE')))
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment