prevent AAAA lookups for specific zone?

fukawi2 · 2012-06-25 11:53:55

One of my banks doesn't appear to have figured out IPv6 yet, and it makes my sessions time out when I'm trying to do banking. Disabling IPv6 makes everything work fine.

While I'm not particularly interested in debugging their incompetence, it appears their DNS servers just don't want to answer AAAA lookups:

$ dig www1.my.commbank.com.au

; <<>> DiG 9.9.0 <<>> www1.my.commbank.com.au
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51081
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www1.my.commbank.com.au.	IN	A

;; ANSWER SECTION:
www1.my.commbank.com.au. 5	IN	A	140.168.70.22

;; AUTHORITY SECTION:
my.commbank.com.au.	466	IN	NS	nw2ca-pr-cclb01.my.commbank.com.au.
my.commbank.com.au.	466	IN	NS	BL1CA-PR-CCLB01.my.commbank.com.au.

;; Query time: 24 msec
;; SERVER: 192.168.31.30#53(192.168.31.30)
;; WHEN: Mon Jun 25 21:49:20 2012
;; MSG SIZE  rcvd: 128



$ dig aaaa www1.my.commbank.com.au

; <<>> DiG 9.9.0 <<>> aaaa www1.my.commbank.com.au
;; global options: +cmd
;; connection timed out; no servers could be reached

Does anyone have any ideas how I can force connections to them to use IPv4, preferably in bind on my gateway/proxy server? I guess the backup plan is to add an entry to /etc/hosts but that forces me to use a specific IPv4 address which is likely to change over time (judging by the fact their TTL is 5 seconds!)

Arch Linux

#1 2012-06-25 11:53:55

prevent AAAA lookups for specific zone?

Board footer