[nsd-users] Fixed IPv6 Source Address for UDP Connections

Peter Koch pk at denic.de
Mon Jul 12 07:51:56 UTC 2010


On Mon, Jul 12, 2010 at 09:28:44AM +0200, Yuri Schaeffer wrote:

> > However, sometimes the DNS server replies from a different address
> > (the client queried 2001:db8:1::2 and got a reply from 2001:db8:1::2),

which would seem perfectly OK - unless this was a failed obfuscation attempt.

> > because the DNS server seems to pick an address randomly. This is
> > possible because UDP is stateless (with TCP it works).
> 
> When you don't specify an interface to bind the OS will select one for
> you. The tunnel interface may be confusing it. Make sure your nsd.conf

This could be read to say that NSD might not follow section 4 of RFC 2181
to the fullest extent possible.  Really?

-Peter



More information about the nsd-users mailing list