RE: forced to execute DNS64

2016-10-11 Thread LEE SUKMOON
7 AM > To: 이석문/ICT Solution팀 > Cc: bind-users@lists.isc.org > Subject: Re: forced to execute DNS64 > > > I don't understand why you are saying "But /29 prefix is not work." > FaceBook is 2a03:2880::/29 and the acl code should handle this. > > Mark > &

Re: forced to execute DNS64

2016-10-11 Thread Mark Andrews
I don't understand why you are saying "But /29 prefix is not work." FaceBook is 2a03:2880::/29 and the acl code should handle this. Mark [rock:~/git/bind9/xx] marka% whois -r 2a03:2880:: % This is the RIPE Database query service. % The objects are in RPSL format. % % The RIPE Database is sub

RE: forced to execute DNS64

2016-10-11 Thread LEE SUKMOON
> To: 이석문/ICT Solution팀 > Cc: bind-users@lists.isc.org > Subject: Re: forced to execute DNS64 > > > Exclude Facebook's IPv6 range. > > dns64 { >exclude { > :::0:0/96; // mapped addresses > 2a03:2880::/29;

Re: forced to execute DNS64

2016-10-11 Thread Mark Andrews
t/isc $ dig @127.0.0.1 star-mini.c10r.facebook.com > +short > 64:ff9b::1f0d:4a24 > > > > -Original Message- > > From: Mark Andrews mailto:ma...@isc.org > > Sent: Tuesday, October 11, 2016 2:14 PM > > To: /ICT Solution > > Cc: bind-users@lists.isc.or

RE: forced to execute DNS64

2016-10-11 Thread LEE SUKMOON
book.com +short 64:ff9b::1f0d:4a24 [root@smlee:/root/isc] $ dig @127.0.0.1 star-mini.c10r.facebook.com +short 64:ff9b::1f0d:4a24 > -Original Message- > From: Mark Andrews [mailto:ma...@isc.org] > Sent: Tuesday, October 11, 2016 2:14 PM > To: 이석문/ICT Solution팀 > Cc: b

Re: forced to execute DNS64

2016-10-10 Thread Mark Andrews
DNS64 doesn't work like that. If you are having problems connecting over IPv6 contact your service provider. Facebook treats IPv6 as a production service and will deal with connectivity issues. If you want to force browsers to use IPv4 then send back RST to the connection attempts to reach the