I have a mikrotik router that is acting as a DNS server for network and also caching the DNS results. The problem is that somehow the Windows PCs are getting IPv6 dns results, "easy" fix is to disable IPv6 in every machine but i tried to investigate a bit further because it a pain to this for every PC and also you cant do it in many Mobile devices. Let me clarify that the Windows PC's are not getting an IPv6 ip from any DHCP ( So no ipv6 dchp rogue server ?? )
My internet is coming from a Speedport modem which is connected to eth1 of Mikrotik that is acting as a PPPOE Client. In the Mikrotik the IPv6 Package isn't installed, also under PPPOE the "use peer dns" is unchecked as well.
In the Speedport the IPv6 DCHP and RA service are disabled as well.
So the problem is that if i do a "nslookup google.com" in a windows machine im getting the following result : ******* = hidden
******* = hidden by meC:\Users\*********>nslookup google.com
Server: *********
Address: 10.0.0.1
Non-authoritative answer:
Name: google.com
Addresses: 2a00:1450:4001:806::200e
216.58.210.14
This result is after a ipconfig /flushdns and a flush of the Mikrotik DNS cache. Strange thing is that after the nslookup request im getting an entry in the Mikrotik DNS Cache as well So i started sniffing with Wireshark and i found the following coming from the Mikrotik eth1 where the PPPOE Client is running So can someone more advanced than me explain me what is really happening here?
How is it possible that Mikrotik is responding to IPv6 DNS Requests and Caching them without the IPv6 package installed and if this isn't Mikrotik is it possible that this is from the Speedport Modem which is behind the PPPOE ?
For your help i did the test with only 1 windows PC connected to the Mikrotik and the Speedport modem.
Im totally puzzled.