Diversion Diversion and AAAA queries?

DeejUK

New Around Here
'ello folks. I've blocked a few domains, and see A record queries get resolved to pxelsrv-tls as expected. However, I then see AAAA queries immediately afterwards, which get resolved to whatever the destination intended by the domain owner is. I'd never heard of the AAAA mechanism before, so it's totally new to me. Apologies if the following is a daft question:

Is there a way of blocking AAAA queries too? Presumably this is an intentional workaround in the ad-requesting client?

Code:
Dec  2 19:37:17 dnsmasq[4411]: query[A] www.ecdinterface.philips.com from 192.168.1.10
Dec  2 19:37:17 dnsmasq[4411]: blocked by blacklist www.ecdinterface.philips.com is 192.168.1.2
Dec  2 19:37:17 dnsmasq[4411]: query[AAAA] www.ecdinterface.philips.com from 192.168.1.10
Dec  2 19:37:17 dnsmasq[4411]: forwarded www.ecdinterface.philips.com to 212.159.6.9
Dec  2 19:37:17 dnsmasq[4411]: reply www.ecdinterface.philips.com is <CNAME>
Dec  2 19:37:17 dnsmasq[4411]: reply dp.dc1.philips.com is <CNAME>
 

Treadler

Very Senior Member
'ello folks. I've blocked a few domains, and see A record queries get resolved to pxelsrv-tls as expected. However, I then see AAAA queries immediately afterwards, which get resolved to whatever the destination intended by the domain owner is. I'd never heard of the AAAA mechanism before, so it's totally new to me. Apologies if the following is a daft question:

Is there a way of blocking AAAA queries too? Presumably this is an intentional workaround in the ad-requesting client?

Code:
Dec  2 19:37:17 dnsmasq[4411]: query[A] www.ecdinterface.philips.com from 192.168.1.10
Dec  2 19:37:17 dnsmasq[4411]: blocked by blacklist www.ecdinterface.philips.com is 192.168.1.2
Dec  2 19:37:17 dnsmasq[4411]: query[AAAA] www.ecdinterface.philips.com from 192.168.1.10
Dec  2 19:37:17 dnsmasq[4411]: forwarded www.ecdinterface.philips.com to 212.159.6.9
Dec  2 19:37:17 dnsmasq[4411]: reply www.ecdinterface.philips.com is <CNAME>
Dec  2 19:37:17 dnsmasq[4411]: reply dp.dc1.philips.com is <CNAME>
Welcome to the forum!
A = ipv4
AAAA = ipv6

In Diversion make sure you have blocking for both enabled ( + ‘type 65‘ if not done already).
b, then 9.
 

Treadler

Very Senior Member
D'oh! Sorry for not RTFMing.

Are there any downsides to doing this?
No. :)

Diversion is a very talented ads/nasties blocker. It will take you where you want to go!

Any further questions, this forum is here to help.
 

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top