avoid using IPv6 for host/domain
-
I'm using IPv6 with HE tunnel.
Some websites refer to my connection as being done through a suspicious VPN and therefore block me.
Is there a way to force IPv4_only name resolution and connectivity for some hosts and/or domains?
-
Could you give an example site that does this?
You could use this unbound python script, even if not netflix to do what your asking
https://forum.netgate.com/topic/131614/netflix-he-net-tunnel-fix-using-unbound-python-module-revisited
-
Netflix does this, and that python script to control DNS by domain is the best answer I've seen so far.
-
He said some sites, so was taking that to mean more than just netflix. So I am curious what other sort of sites might be doing it. But yeah I agree the script is a best solution I have seen.
@jimp on a bit of side note - you think script might/could be included in the default unbound install and manage with the unbound gui in pfsense? Have not checked, maybe there is already a bounty for that?
-
@johnpoz said in avoid using IPv6 for host/domain:
@jimp on a bit of side note - you think script might/could be included in the default unbound install and manage with the unbound gui in pfsense? Have not checked, maybe there is already a bounty for that?
Last I looked it had some quirks that made it suboptimal to include by default but it's been a while so I can't remember the details. It could be done, but it would take a lot more work than it would appear on the surface to wrap it up in a way that could be included properly.
-
Thanks - it is a bit of a complex thing sure. If it was there many users more than likely shoot themselves in the foot with it anyway ;) Its easy enough to get working for those that really want/need its functionality. Thanks!
-
@johnpoz said in avoid using IPv6 for host/domain:
Could you give an example site that does this?
That was one of my SIP providers, here is the message I see after login:
Sorry, your IP address is marked as high risk or you're accessing our web site through IP proxy or VPN. We can't provide a service to you.I'll try the script suggested, thanks!
