Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Disable IPv6 from DNS

    Scheduled Pinned Locked Moved General pfSense Questions
    18 Posts 5 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • fireodoF
      fireodo @markdudov
      last edited by fireodo

      @markdudov said in Disable IPv6 from DNS:

      Yes, I know, but is there any way where I can disable it?

      If you use ISC DHCP In unbound settings in "Custom options" set

      do-ip6: no
      

      IMHO

      Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
      SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
      pfsense 2.8.0 CE
      Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

      johnpozJ 1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @fireodo
        last edited by

        @fireodo you mean unbound - what would dhcpd have to do with anything? Maybe that is why I don't see it, I have in my unbound settings

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        fireodoF markdudovM 2 Replies Last reply Reply Quote 1
        • fireodoF
          fireodo @johnpoz
          last edited by

          @johnpoz said in Disable IPv6 from DNS:

          you mean unbound

          Yeah, sorry!

          Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
          SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
          pfsense 2.8.0 CE
          Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

          johnpozJ 1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator @fireodo
            last edited by

            @fireodo still must have something to do with 24.03 started showing that. I removed my do-ipv6 setting, and even changed listen interfaces to all vs the specifics I had set and still only see 127.0.0.1 and not the IPv6 version.

            Maybe that setting in 24.03 will remove it?

            I won't know until I finish my office remodel in the next few weeks. When I move everything into my new rack is when I will install the ssd into my pfsense and upgrade it to 24.03.. Be able to play with it then - but I still don't see the reason to worry about it listing that..

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • markdudovM
              markdudov @johnpoz
              last edited by

              @johnpoz @fireodo

              Is this the correct location?
              Services -> DNS Resolver-> General Settings -> Custom options

              Text inside: do-ip6: no

              Or I'm wrong about the place, because the ipv6 loopback address doesn't disappear

              johnpozJ fireodoF 2 Replies Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @markdudov
                last edited by

                @markdudov you will need a server: line above it I would think.. like this

                settings.jpg

                But I am not even sure if that setting will have any effect it... To be honest it shouldn't

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • fireodoF
                  fireodo @markdudov
                  last edited by fireodo

                  @markdudov said in Disable IPv6 from DNS:

                  Is this the correct location?
                  Services -> DNS Resolver-> General Settings -> Custom options

                  Text inside: do-ip6: no

                  Yes! I have here 2.7.2 CE but I dont think unbound is so much different in 24.03 ... Maybe you need a "server" line above as johnpoz has written ...

                  Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                  SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                  pfsense 2.8.0 CE
                  Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

                  johnpozJ markdudovM 2 Replies Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @fireodo
                    last edited by

                    @fireodo so your saying on your 2.7.2 you see that ::1 in your dns servers like he does if you remove the do-ipv6 setting?

                    My 2.7.2 lab VM doesn't show that.. I currently don't have IPv6 enabled on it - but you can't really turn off the IPv6 loopback or link-local addresses anyway.

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    fireodoF 1 Reply Last reply Reply Quote 0
                    • markdudovM
                      markdudov @fireodo
                      last edited by

                      @fireodo
                      Tested it that way too but that didn't make it go away either

                      573ab151-3538-4278-b481-cb3d23266890-image.png

                      587de540-3af7-4e76-8a7d-9b361c8d1eaa-image.png

                      johnpozJ 1 Reply Last reply Reply Quote 0
                      • fireodoF
                        fireodo @johnpoz
                        last edited by fireodo

                        @johnpoz said in Disable IPv6 from DNS:

                        so your saying on your 2.7.2 you see that ::1 in your dns servers like he does if you remove the do-ipv6 setting?

                        I have to check that - I have that doip6:no for very long time ...

                        Edit: Indeed the 2.7.2 dont show the ip6 even if the line in custom settings is removed ... :-(

                        Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                        SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                        pfsense 2.8.0 CE
                        Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator @markdudov
                          last edited by johnpoz

                          @markdudov you can not really get rid of that.. even if doesn't show in your dns.. Loopback is still going to be there

                          loopback.jpg

                          Other than bothering your clearly OCD tendencies it makes no difference.

                          edit: ok I had updated my pfsense+ lab vm to 24.03 and I see it there.

                          24.03.jpg

                          let me see if I can get it to go away ;)

                          edit2: ok get that ocd monkey off your back you can do this. Set your dns to 127.0.0.1 manually, and any other dns you want.. Not sure why.. to be honest resolving is the way to go imho.

                          then set pfsense to ignore local and only use remote - which you set to 127.0.0.1 which is your ipv4 loopback

                          ipv6loopback.jpg

                          Personally I wouldn't worry about the ::1, especially if your going to set other dns in there.. because your forwarding for your clients. I am not sure how messing with that setup might effect pfsense resolving its own local resources? If you tell it to ignore local and only use remote which you have setup in your dns settings, and you put in multiples with some being say 8.8.8.8 - I am not sure if at some point pfsense my try and resolve its own name for example from 8.8.8.8?

                          loopback being either 127.0.0.1 or ::1 is just pfsense talking to itself really - what does it matter if it used the ipv4 or ipv6 to do that?

                          While it does seem you can make the ::1 entry go away, I am not 100% on what sort of side effect that could bring in the future? Your better off just fighting off the ocd monkey, maybe you need to take off your hammer protection gloves to do that? ;)

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          1 Reply Last reply Reply Quote 0
                          • M
                            mvikman
                            last edited by

                            Or just hide the DNS-part in the System widget... :)

                            pfSense Plus 24.11-RELEASE (amd64)
                            Dell Optiplex 7040 SFF
                            Core i5-6500, 8GB RAM, 2x 240GB SSD (ZFS Mirror)
                            HPE 561T (X540-AT2), 2-port 10Gb RJ45
                            HPE 562SFP+ (X710-DA2), 2-port 10Gb SFP+

                            johnpozJ 1 Reply Last reply Reply Quote 1
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator @mvikman
                              last edited by

                              @mvikman hahaha

                              ocd monkey gone with simple click ;)

                              ocdmonkey.jpg

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              1 Reply Last reply Reply Quote 2
                              • JonathanLeeJ
                                JonathanLee
                                last edited by JonathanLee

                                You can set it to solve only A records also
                                unbound resolver custom options like this

                                server:
                                do-ip4: yes
                                prefer-ip4: yes
                                do-ip6: no
                                prefer-ip6: no
                                private-address: ::/0
                                dns64-ignore-aaaa: *.*
                                do-not-query-address: ::
                                do-not-query-address: ::1
                                do-not-query-address: ::/0
                                

                                Make sure to upvote

                                1 Reply Last reply Reply Quote 1
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.