Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Disable IPv6 from DNS

    Scheduled Pinned Locked Moved General pfSense Questions
    18 Posts 5 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator @fireodo
      last edited by

      @fireodo still must have something to do with 24.03 started showing that. I removed my do-ipv6 setting, and even changed listen interfaces to all vs the specifics I had set and still only see 127.0.0.1 and not the IPv6 version.

      Maybe that setting in 24.03 will remove it?

      I won't know until I finish my office remodel in the next few weeks. When I move everything into my new rack is when I will install the ssd into my pfsense and upgrade it to 24.03.. Be able to play with it then - but I still don't see the reason to worry about it listing that..

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • markdudovM
        markdudov @johnpoz
        last edited by

        @johnpoz @fireodo

        Is this the correct location?
        Services -> DNS Resolver-> General Settings -> Custom options

        Text inside: do-ip6: no

        Or I'm wrong about the place, because the ipv6 loopback address doesn't disappear

        johnpozJ fireodoF 2 Replies Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator @markdudov
          last edited by

          @markdudov you will need a server: line above it I would think.. like this

          settings.jpg

          But I am not even sure if that setting will have any effect it... To be honest it shouldn't

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • fireodoF
            fireodo @markdudov
            last edited by fireodo

            @markdudov said in Disable IPv6 from DNS:

            Is this the correct location?
            Services -> DNS Resolver-> General Settings -> Custom options

            Text inside: do-ip6: no

            Yes! I have here 2.7.2 CE but I dont think unbound is so much different in 24.03 ... Maybe you need a "server" line above as johnpoz has written ...

            Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
            SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
            pfsense 2.8.0 CE
            Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

            johnpozJ markdudovM 2 Replies Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @fireodo
              last edited by

              @fireodo so your saying on your 2.7.2 you see that ::1 in your dns servers like he does if you remove the do-ipv6 setting?

              My 2.7.2 lab VM doesn't show that.. I currently don't have IPv6 enabled on it - but you can't really turn off the IPv6 loopback or link-local addresses anyway.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              fireodoF 1 Reply Last reply Reply Quote 0
              • markdudovM
                markdudov @fireodo
                last edited by

                @fireodo
                Tested it that way too but that didn't make it go away either

                573ab151-3538-4278-b481-cb3d23266890-image.png

                587de540-3af7-4e76-8a7d-9b361c8d1eaa-image.png

                johnpozJ 1 Reply Last reply Reply Quote 0
                • fireodoF
                  fireodo @johnpoz
                  last edited by fireodo

                  @johnpoz said in Disable IPv6 from DNS:

                  so your saying on your 2.7.2 you see that ::1 in your dns servers like he does if you remove the do-ipv6 setting?

                  I have to check that - I have that doip6:no for very long time ...

                  Edit: Indeed the 2.7.2 dont show the ip6 even if the line in custom settings is removed ... :-(

                  Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                  SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                  pfsense 2.8.0 CE
                  Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @markdudov
                    last edited by johnpoz

                    @markdudov you can not really get rid of that.. even if doesn't show in your dns.. Loopback is still going to be there

                    loopback.jpg

                    Other than bothering your clearly OCD tendencies it makes no difference.

                    edit: ok I had updated my pfsense+ lab vm to 24.03 and I see it there.

                    24.03.jpg

                    let me see if I can get it to go away ;)

                    edit2: ok get that ocd monkey off your back you can do this. Set your dns to 127.0.0.1 manually, and any other dns you want.. Not sure why.. to be honest resolving is the way to go imho.

                    then set pfsense to ignore local and only use remote - which you set to 127.0.0.1 which is your ipv4 loopback

                    ipv6loopback.jpg

                    Personally I wouldn't worry about the ::1, especially if your going to set other dns in there.. because your forwarding for your clients. I am not sure how messing with that setup might effect pfsense resolving its own local resources? If you tell it to ignore local and only use remote which you have setup in your dns settings, and you put in multiples with some being say 8.8.8.8 - I am not sure if at some point pfsense my try and resolve its own name for example from 8.8.8.8?

                    loopback being either 127.0.0.1 or ::1 is just pfsense talking to itself really - what does it matter if it used the ipv4 or ipv6 to do that?

                    While it does seem you can make the ::1 entry go away, I am not 100% on what sort of side effect that could bring in the future? Your better off just fighting off the ocd monkey, maybe you need to take off your hammer protection gloves to do that? ;)

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • M
                      mvikman
                      last edited by

                      Or just hide the DNS-part in the System widget... :)

                      pfSense Plus 24.11-RELEASE (amd64)
                      Dell Optiplex 7040 SFF
                      Core i5-6500, 8GB RAM, 2x 240GB SSD (ZFS Mirror)
                      HPE 561T (X540-AT2), 2-port 10Gb RJ45
                      HPE 562SFP+ (X710-DA2), 2-port 10Gb SFP+

                      johnpozJ 1 Reply Last reply Reply Quote 1
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @mvikman
                        last edited by

                        @mvikman hahaha

                        ocd monkey gone with simple click ;)

                        ocdmonkey.jpg

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 2
                        • JonathanLeeJ
                          JonathanLee
                          last edited by JonathanLee

                          You can set it to solve only A records also
                          unbound resolver custom options like this

                          server:
                          do-ip4: yes
                          prefer-ip4: yes
                          do-ip6: no
                          prefer-ip6: no
                          private-address: ::/0
                          dns64-ignore-aaaa: *.*
                          do-not-query-address: ::
                          do-not-query-address: ::1
                          do-not-query-address: ::/0
                          

                          Make sure to upvote

                          1 Reply Last reply Reply Quote 1
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.