BIND randomly stopped responding to IPv6 link-local requests

psycroptic · 09-28-2014, 09:39 AM

I have a BIND local DNS server that was configured to listen on all v6 interfaces. Clients on the (small) LAN would look up names via the server's link-local address. After a recent upgrade to 9.10.1, the server randomly stopped responding to queries on that interface. My LAN has a PD split from Comcast, and the server responds fine to requests on its global address; but this isn't what i want, since the global address can change from time to time.

No v6 firewall is on the local machine (the router for the LAN is obviously firewalling traffic from the WAN approriately). A packet trace on the server shows no packets when a client tries to do an "nslookup - fe80:xxxx:xxxx" to the server's link-local, even though the server's link-local is pingable on the LAN, and the NTP server listening there is working fine....

relevant /etc/named.conf:

Code:

options {
        directory "/var/named";
        pid-file "/var/run/named/named.pid";
        auth-nxdomain yes;
        datasize default;
        allow-recursion { any; };
        allow-transfer { localhost; };
        allow-update { localhost; };
        allow-query { any; };
        forwarders { 2001:558:FEED::1; 2001:558:FEED::2; };
        listen-on { 127.0.0.1; 172.16.16.2; };
        listen-on-v6 { any; };
        max-cache-ttl 1209600;
        edns-udp-size 4096 ;
        version none;
        hostname none;
        server-id none;
};