[squid-users] [ext] Re: Disable IPV6 for certain destinations only?

Ralf Hildebrandt Ralf.Hildebrandt at charite.de
Wed Apr 19 09:01:25 UTC 2023


* Stuart Henderson <stu at spacehopper.org>:

> I guess you want something akin to Postfix's smtp_dns_reply_filter but
> most software doesn't have anything similar.

One should expect me to be familiar with Postfix, but THAT option is new
to me :)
 
> Without code changes, the simplest quick fix may be to add a static
> 'reject' route to the IPv6 block used by this publisher on the proxy (it
> could be kept up-to-date by a dns lookup script). That's less of a
> liability than forcing resolution to a particular IP.

Also a nice option.

-- 
Ralf Hildebrandt
Charité - Universitätsmedizin Berlin
Geschäftsbereich IT | Abteilung Netzwerk

Campus Benjamin Franklin (CBF)
Haus I | 1. OG | Raum 105
Hindenburgdamm 30 | D-12203 Berlin

Tel. +49 30 450 570 155
ralf.hildebrandt at charite.de
https://www.charite.de


More information about the squid-users mailing list