I am having a horrible time with DNS.. I have a CCR2004 Router1 and it’s running DNS for my domain say example.com
I also have a CHR Router2 running as a VM and it’s handling a subdomain say stuff.example.com
I have a FWD record in Router1 stuff.example.com (match subdomain) → Router2
I have a FWD record in Router2 example.com (match subdomain) → Router1
I also have the default DNS server in Router2 set as Router1
The issue is that any host with IPv6 enabled trying to resolve somehost.stuff.example.com first checks for an AAAA record.
It forwards correctly to Router2, Router2 doesn’t have an AAAA record for somehost.stuff.example.com but it does have an A record.
It forwards the request to Router1 which forwards back to Router2, etc… So it takes forever to fail before it tries for an A record.
I really need a way to force Router2 to return NOERROR and no answer.
It would be REALLY GREAT if when using DNS static settings for A and AAAA records, if you allow say 0.0.0.0 or :: in for the address in the DNS settings it would return no answers and NOERROR.
I have found a few people in the forums that have had trouble with this and would fix a lot of issues. (Essentially it would allow you make the router the authoritative DNS server for a domain and bypass the upstream check when needed)
Example: if I could create an AAAA record for stuff.example.com and match subdomain, put :: in for the address and when some host looks for somehost.stuff.example.com it will check for an AAAA record, Router1 will forward to Router2, Router2 will return no answers with NOERROR and the querying host will immediately query for an A record and resolve. It might be an easy way to blackhole a domain as well if you wanted it.