IPv6 DNS Server

UnderCover

How do I specify a IPv6 DNS server (like in IPv6 System > General Setup)?

Cino

i added a IPv6 DNS under System:General Setup and enter it as my first DNS Server in that section

UnderCover

I tried that and it seemed to not matter

I have two other questions
1 how do u get the dhcpv6 server to assign a dns server to the clients. When I look in in the ipconfig settings the dns server is blank.

Also anyone know a free public dns server that is native ipv6 and would get me past the pure dns server test on test-ipv6.com?

johnpoz

Also anyone know a free public dns server that is native ipv6 and would get me past the pure dns server test on test-ipv6.com?

You should be able to use the he.net dns server.

Anycasted IPv6 Caching Nameserver: 2001:470:20::2

But I just run on my own using unbound, since I have a he.net tunnel setup

And score 10/10, and 10/10

; <<>> DiG 9.8.0 <<>> @2001:470:snipped:b85::1 ipv6.google.com AAAA
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55638
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;ipv6.google.com. IN AAAA

;; ANSWER SECTION:
ipv6.google.com. 574106 IN CNAME ipv6.l.google.com.
ipv6.l.google.com. 268 IN AAAA 2001:4860:b007::63

;; Query time: 3 msec
;; SERVER: 2001:470:snipped:b85::1#53(2001:470:snipped:b85::1)
;; WHEN: Sun Mar 20 20:57:21 2011
;; MSG SIZE rcvd: 82

10-10.jpg_thumb

UnderCover

i setup an he.net tunnel and I did not specify a dns server and I get a 9/10 so something is not setup right on my end with the dns server…

any ideas?

johnpoz

and which specific test is failing - just point at their dns.

UnderCover

this is the test that is failing

Test if your ISP's DNS server uses IPv6 bad (0.425s) http://ds.v6ns.test-ipv6.com/ip/?callback=? (This is bonus credit)

This is a test of your ISP's resolver (instead of a test of your host). If this test passes, your DNS server (often run by your ISP) is capable of reaching IPV6-only DNS authoritative servers on the internet. This is not critical (at this time) for you to reach sites via IPv6.

any ideas on how to fix this? could this be because the dns servers for ipv4 are opendns? anyways around this?

johnpoz

Like I already said point your client to 2001:470:20::2

If you using pfsense as your forwarding, then have it forward to above

I run unbound on my pfsense, I do not forward and have no problems.

UnderCover

that worked thanks!

jimp

I got around this using the DNS forwarder (not unbound) by adding the he.net ipv6 server to System > General, though it would be nice if the gateway drop-down there listed the gif interface, or at least the gateways and not just other interfaces.

databeestje

I'll add that to the todo list. That would be a general 2.0 thing I'd guess

jimp

Yeah I think that is a 2.0 thing. I'm not exactly sure what the criteria are for showing up there, but it should be gateways listed there, I thought.

Looking a bit deeper we already have a ticket open for that: http://redmine.pfsense.org/issues/785

But it's set to 'future' since it's more of a convenience and could be done via static routes as well.