Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - ritztro

#1
Had similar problems. Adguard was my primary DNS with unbound as my upstream. Certain apps on my Android phone did not work after I forced it to use my local DNS and disabled private DNS. I fixed this by disabling DNS64 support on Unbound.

I found that I had previously enabled DNS64 support on unbound because I was trying to set it up on my network, but gave up on DNS64 and disabled it across OPNSense. However, by leaving it on in Unbound, DNS was synthesizing fake IPv6 DNS responses for a DNS64 prefix which was not being actively forwarded. Other devices were apparently robust to this, but not Android apps.

After disabling DNS64 I had to flush Adguard and Unbound caches and restart apps + clear their caches.
#2
Assuming this doesn't already exist, I've explored this a bit more. I think a simple solution might be to scrape the NDP table for MAC address <-> IPv6 address associations, do a DHCPv4 hostname lookup using the MAC, and then register the mapping with Unbound.

Will the NDP table be comprehensive (i.e. contain every local IPv6 address that is handled by the router)?

Edit: This seems a bit closer to what I'm looking for, but I think scanning for packets isn't required if this is run on the router: https://github.com/gpailler/snifipv6
#3
Hi!

I recently setup an OPNsense router for my home network. Lately, I've been trying to configure IPv6 support. One thing I've noticed is that IPv6 addresses on my local network lack hostnames. After doing some reading, I've noticed this is common/expected and a common complaint with IPv6.

Since IPv6 clients aren't required to register a hostname when requesting an address (in DHCPv6) and don't even request an address with SLAAC, I was curious if there was some mechanism to automatically generate hostnames for IPv6 addresses on a local network (particularly SLAAC based addresses since this would also support Android devices).

I found ip6neigh, which is a tool available to OpenWrt users to generate IPv6 hostnames from corresponding IPv4 DHCP leased hostnames (if available). Is there anything similar for OPNsense? I've heard maybe Dnsmasq has a hacky implementation to support this?

I'm imagining something that can generate hostnames for local IPv6 addresses and then supports automatic registration with a local DNS resolver, like Unbound.

Would this even be possible/useful for devices that use privacy extensions? I think ip6neigh might try to grab all IPv6 addresses associated with a device (?) and hope it finds a stable one (based on the device MAC), associating  the other IPv6 addresses with that address, and using the MAC to do an IPv4 lease hostname lookup.

Edit: I wanted to note that my network works fine, this is more of a usability/ease-of-use focused question (e.g. using rDNS to see hostnames in reports/logs/stats/etc rather than ipv6 ips)