nsd users - Dec 2016 - avoid errormessage on zone transfer?

Hello once again,

to fetch the root zone we use a config template common an all hosts.

     zone:
         name: "."
         zonefile: "data/root"
         request-xfr: 2001:500:2f::f NOKEY  # f.root-servers.net
         request-xfr: 192.5.5.241 NOKEY     # f.root-servers.net
         ...

An IPv4 only host still try to connect to the first address which  
obviously fail:

     error: xfrd: 2001:500:2f::f cannot create tcp socket: Address  
family not supported by protocol

I tried to add "do-ip6: no" and even add an "outgoing-interface:
"
statement to the zone block.
That does not circumvent the error message that trigger an alarm in  
our monitoring system.

Any chance to force ipv4 only? I suspect "do-ip6: no" should do the  
job but unfortunately it doesn't.

Andreas

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi Andreas,

Sure, I have set it to omit that error message when verbosity is 2 or
lower.  On higher verbosity you still see the message.

Best regards, Wouter

On 14/12/16 08:03, A. Schulze wrote:
> 
> Hello once again,
> 
> to fetch the root zone we use a config template common an all
> hosts.
> 
> zone: name: "." zonefile: "data/root" request-xfr:
2001:500:2f::f
> NOKEY  # f.root-servers.net request-xfr: 192.5.5.241 NOKEY     #
> f.root-servers.net ...
> 
> An IPv4 only host still try to connect to the first address which 
> obviously fail:
> 
> error: xfrd: 2001:500:2f::f cannot create tcp socket: Address
> family not supported by protocol
> 
> I tried to add "do-ip6: no" and even add an
"outgoing-interface: "
> statement to the zone block. That does not circumvent the error
> message that trigger an alarm in our monitoring system.
> 
> Any chance to force ipv4 only? I suspect "do-ip6: no" should do
the
> job but unfortunately it doesn't.
> 
> Andreas
> 
> _______________________________________________ nsd-users mailing
> list nsd-users at NLnetLabs.nl 
> https://open.nlnetlabs.nl/mailman/listinfo/nsd-users
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=gXHv
-----END PGP SIGNATURE-----