Fortigate 没有响应 DNS AAAA

Fortigate 没有响应 DNS AAAA

我尝试设置仅 IPv6 的家庭局域网,但 DNS 似乎无法正常工作。要启用 NAT64,我必须将公共 DNS 服务器更改为我的防火墙(无论如何,这是首选选项)。我使用的是最新固件 7.4 的 Fortigate

它成功解析了 A 记录:

nslookup -type=A ip4only.me 
Server:     2001:xxxx:xxxx:4c03::f
Address:    2001:xxxx:xxxx:4c03::f#53

Non-authoritative answer:
Name:   ip4only.me
Address: 23.153.8.78

以及将 IPv4 响应转换为 IPv6 响应

nslookup -type=AAAA ip4only.me
Server:     2001:xxxx:xxxx:4c03::f
Address:    2001:xxxx:xxxx:4c03::f#53

Non-authoritative answer:
ip4only.me  has AAAA address 64:ff9b::1799:84e

问题出在仅限 IPv6 的站点上,Fortigate 不会回复:

nslookup -type=AAAA ip6only.me                     
Server:     2001:xxxx:xxxx:4c03::f
Address:    2001:xxxx:xxxx:4c03::f#53

Non-authoritative answer:
*** Can't find ip6only.me: No answer

当然,公共 DNS 服务器可以解析这个查询:

nslookup -type=AAAA ip6only.me 2001:4860:4860::8888
Server:     2001:4860:4860::8888
Address:    2001:4860:4860::8888#53

Non-authoritative answer:
ip6only.me  has AAAA address 2001:4810:0:3::78

相关内容