Family Shield IPv6 DNS address?

Comments

11 comments

  • Avatar
    rotblitz

    If you have dual-stack connectivity, you use these addresses for FamilyShield:
    ::ffff:d043:de7b and ::ffff:d043:dc7b

    1
    Comment actions Permalink
  • Avatar
    icidns

    Thank you rotblitz. I'll give that a try.

    0
    Comment actions Permalink
  • Avatar
    smayer97 (Edited )

    I know this is an old thread but in case some one reads this (like me), be aware that any address starting with "::", "fc", "fd", or "fe" are unable to work with the public IPv6 Internet. (source: http://www.test-ipv6.com/    faq:No IPv6 tab) Therefore, using these CANNOT access ANY IPv6 referenced sites (destination).

    Not sure how much of an issue this might be but someone posted these (unverified) stats:

    https://support.opendns.com/hc/en-us/community/posts/115001087127-IPv6-feature-parity-needed

    The above stats emphasize the protocol that users are using (origin). I believe the important part is NOT which protocol users use (starting point or origin) to reach a site but rather which protocol a site (destination) uses to reach it.

    0
    Comment actions Permalink
  • Avatar
    rotblitz (Edited )

    “Therefore, using these CANNOT access ANY IPv6 referenced sites (destination).”

    This is wrong. You definitely can raise DNS queries for AAAA records over IPv4. No limitation, you can reach every IPv6 destination over IPv6.

    0
    Comment actions Permalink
  • Avatar
    smayer97 (Edited )

    @roblitz please clarify.... I do not know what AAAA records are. Are you saying that the info above is inaccurate and that OpenDNS can access all IPv6 destinations? even with addresses starting as noted above, which the OpenDNS DNS does start with "::"?

    P.S. I am not well versed in this stuff. I just found the above at what I believe is a respected site.

    I am also trying to understand your replies re: IPv4 vs IPv6 in light of the results I get below from the  http://www.test-ipv6.com/ website.

     

    0
    Comment actions Permalink
  • Avatar
    rotblitz (Edited )

    DNS record types are excellently documented on the internet. No reason to repeat it here. You can query IPv6 destinations via IPv4. And OpenDNS does not need to access anything. DNS is the phone book of the internet, not the phone lines.

    You do not seem to have had IPv6 connectivity when you ran the test, at least not from this device.

    0
    Comment actions Permalink
  • Avatar
    smayer97

    Thanks for the reply. I do not need to know the technical details. I do understand that DNS is the "phone book". My understanding is that IPv6 and IPv4 are essentially addressing protocols. Just for clarity, are you saying the comment by the above test site "any address starting with "::", "fc", "fd", or "fe" are unable to work with the public IPv6 Internet." is incorrect?

    Also, I am unclear what the implications of my test results mean, as they appear conflicting to me:

    • "You appear to be able to browse the IPv4 Internet only. You will not be able to reach IPv6-only sites." AND
    • "Your DNS server (possibly run by your ISP) appears to have IPv6 Internet access."

    That latter, and your comment "You can query IPv6 destinations via IPv4." suggest that there is no restriction to access IPv6 sites but then the last comment from the test seems to contradict. Can you shed light on this as to its implications?

     

    0
    Comment actions Permalink
  • Avatar
    rotblitz (Edited )

    Everything’s correct. It looks like you sometimes have no IPv6 connectivity, as the test results indicate. I’m not in the position to explain someone’s conflicting web page test results, but I think this is in error, because it does not make sense to me.

    And again, there are no restrictions to query IPv6 destinations, but connecting to them if you don’t have IPv6 connectivity. All clear now?

    0
    Comment actions Permalink
  • Avatar
    smayer97

    Thanks for the help. Tried another test site that shed a bit more light on this but still leaves me with some questions.

    My router shows that I have a valid IPv4 and IPv6 IP addresses from my ISP and I have both IPv4 and IPv6 DNS entries in my router to OpenDNS (which I now understand only provides IPv4 DNS's at this time) and yet 2 different test sites tell me I do not have IPv6 connectivity. So now I am left with the mystery as to why. Is it because of my ISP, because of the router, or because of OpenDNS? That is what still has me puzzled.

    Fortunately it has not impacted me yet as I have not run into a site I cannot reach.

    0
    Comment actions Permalink
  • Avatar
    rotblitz (Edited )

    “I now understand only provides IPv4 DNS's at this time”

    You still didn’t get it. If you query a domain’s IPv6 address, OpenDNS gives you this information, always, if it has one, regardless if you query this over IPv4 or over IPv6. However, if you query over IPv6, your dashboard settings are not taken care of, because you cannot register your IPv6 address at the dashboard. In addition, there are no FamilyShield IPv6 resolver addresses yet.

    I cannot comment on your other IPv6 problems, because they have nothing to do with OpenDNS.

    I’m out here now, because the question after the FamilyShield addresses has been more than fully and completely answered, even over two different threads.

    0
    Comment actions Permalink
  • Avatar
    smayer97

    No...I did get it re: IPv6...I just did not word my response correctly as I was simply thinking about connectivity.

    Thanks for your help.

    0
    Comment actions Permalink

Please sign in to leave a comment.