[Dnsmasq-discuss] Please support IPv6 on 'alias=' settings

[Simon Kelley]

On 04/08/2021 15:05, Petr Menšík wrote:
> Hi,
> 
> how does this help to block something? If responses are dnssec signed,
> changing replies would make verification failing.
> 
> What is the point of blocking base on IP level in DNS? If you want
> blocking target addresses, why just firewall is not used at the router?
> What is advantage of using DNS instead?
> 
> It can block any name by using --address=/blockedname/::1. No similar
> thing is possible based on resolved address, but when would it be
> needed? Is there reason why firewall would not be more efficient way to
> block IP (range)?
> 
> Cheers,
> 

All good points, but on the other hand, if we support this for IPv4,
there's no reason not to do it for IPv6 also.



Simon.