Différences

Ci-dessous, les différences entre deux révisions de la page.

--- tech:notes_dns_bind9 [2026/06/07 19:12] – modification externe 127.0.0.1
+++ tech:notes_dns_bind9 [2026/06/11 10:32] (Version actuelle) – Jean-Baptiste
@@ Ligne 8: / Ligne 8: @@
 Alternative à Bind :
-FIXME2
+* [unbound](https://doc.ubuntu-fr.org/unbound)
-* [[https://doc.ubuntu-fr.org/unbound|unbound]]
 * PowerDNS
-* [[https://en.wikipedia.org/wiki/Knot_DNS|Knot DNS]]
+* [Knot DNS](https://en.wikipedia.org/wiki/Knot_DNS)
-* [[https://coredns.io/|CoreDNS]] (cncf.io)
+* [CoreDNS](https://coredns.io/) (cncf.io)
@@ Ligne 140: / Ligne 139: @@
 OPTIONS="-4"
 ~~~
+Voir aussi les options :
+  * `listen-on` for IPv4 addresses
+  * `listen-on-v6` for IPv6 addresses
+  * `query-source` for IPv4 addresses
+  * `query-source-v6` for IPv6 addresse
+Exemple :
+~~~
+options {
+    // Listen on all IPv4 addresses (default)
+    listen-on { any; };
+    // No listen on IPv6
+    listen-on-v6 { none; };
+};
+~~~
 Il faudra également ajouter une option à /etc/named.conf.
@@ Ligne 146: / Ligne 164: @@
 ~~~c
 options {
-  directory "/var/named";
+  //filter-aaaa-on-v4 yes;    //option 'filter-aaaa-on-v4' no longer exists
-  filter-aaaa-on-v4 yes;
+  // Voir AAAA vs A6
 };
 ~~~
+Remplacé par
+~~~c
+plugin query "filter-aaaa.so" {
+        filter-aaaa-on-v4 yes;
+        filter-aaaa-on-v6 yes;
+        filter-aaaa { 192.0.2.1; 2001:db8:2::1; };
+};
+~~~
+Voir aussi
+Prevent your server from using the learned IPv6 addresses itself during recursion
+~~~c
+server ::/0 { bogus yes; };
+~~~
 source : https://blog.microlinux.fr/bind-centos-7/
@@ Ligne 297: / Ligne 332: @@
 ~~~bash
-for fqdn in $(rgrep 192.168.10.22 /etc/bind/zones | sed -e 's%^/etc/bind/zones/%%' -e 's%.db%%' |awk '{print $1}' | awk -F':' '{print $2 "." $1 }' | sed -e 's%^@.%%' | sort -n) ; do host $fqdn ; done | grep 'has address 192.168.10.22' | awk '{print $1}'
+for fqdn in $(rgrep 192.168.10.22 /etc/bind/zones | sed -e 's%^/etc/bind/zones/%%' -e 's%.db%%' | awk '{print $1}' | awk -F':' '{print $2 "." $1 }' | sed -e 's%^@.%%' | sort -n) ; do host $fqdn ; done | grep 'has address 192.168.10.22' | awk '{print $1}'
 ~~~