Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    avoid using IPv6 for host/domain

    Scheduled Pinned Locked Moved IPv6
    7 Posts 3 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      AndrewZ
      last edited by

      I'm using IPv6 with HE tunnel.
      Some websites refer to my connection as being done through a suspicious VPN and therefore block me.
      Is there a way to force IPv4_only name resolution and connectivity for some hosts and/or domains?

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        Could you give an example site that does this?

        You could use this unbound python script, even if not netflix to do what your asking
        https://forum.netgate.com/topic/131614/netflix-he-net-tunnel-fix-using-unbound-python-module-revisited

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        A 1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          Netflix does this, and that python script to control DNS by domain is the best answer I've seen so far.

          Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            He said some sites, so was taking that to mean more than just netflix. So I am curious what other sort of sites might be doing it. But yeah I agree the script is a best solution I have seen.

            @jimp on a bit of side note - you think script might/could be included in the default unbound install and manage with the unbound gui in pfsense? Have not checked, maybe there is already a bounty for that?

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            jimpJ 1 Reply Last reply Reply Quote 0
            • jimpJ
              jimp Rebel Alliance Developer Netgate @johnpoz
              last edited by

              @johnpoz said in avoid using IPv6 for host/domain:

              @jimp on a bit of side note - you think script might/could be included in the default unbound install and manage with the unbound gui in pfsense? Have not checked, maybe there is already a bounty for that?

              Last I looked it had some quirks that made it suboptimal to include by default but it's been a while so I can't remember the details. It could be done, but it would take a lot more work than it would appear on the surface to wrap it up in a way that could be included properly.

              Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

              Need help fast? Netgate Global Support!

              Do not Chat/PM for help!

              1 Reply Last reply Reply Quote 1
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                Thanks - it is a bit of a complex thing sure. If it was there many users more than likely shoot themselves in the foot with it anyway ;) Its easy enough to get working for those that really want/need its functionality. Thanks!

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • A
                  AndrewZ @johnpoz
                  last edited by

                  @johnpoz said in avoid using IPv6 for host/domain:

                  Could you give an example site that does this?

                  That was one of my SIP providers, here is the message I see after login:

                  Sorry, your IP address is marked as high risk or you're accessing our web site through IP proxy or VPN. We can't provide a service to you.
                  

                  I'll try the script suggested, thanks!

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.