unbound过滤ipv6域名查询

将所有的ipv6地址设置为private-address，这样unbound转发域名有ipv6结果时不返回给查询的客户端。

如果对单独的域名进行过滤新建一个server实例，然后forward-zone转发特定域名到过滤ipv6的端口。

server:
 port: 5350
 do-ip4: yes
 do-ip6: no 
 private-address: ::/0
 interface: 0.0.0.0
 access-control: 127.0.0.0/8 allow
 access-control: 192.168.0.0/16 allow
# cache-max-ttl: 14400
# cache-min-ttl: 300
 hide-identity: yes
 hide-version: yes
 minimal-responses: yes
 prefetch: yes
 qname-minimisation: yes
# verbosity: 1
# logfile: "/var/log/unbound.log"

forward-zone:
  name: "."
  forward-addr: 114.114.114.114

标签：none