Hurricane Electric's IPv6 Tunnel Broker Forums

Advanced search  


Welcome to Hurricane Electric's forums!

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Messages - chaz6

Pages: [1]
I am in support of this too. It would make it easier to do DNS verification with LetsEncrypt (required for wildcard certificates).

General Questions & Suggestions / Re: CAA records
« on: December 31, 2015, 07:45:16 AM »
I support this change.

General Questions & Suggestions / Re: Unable to reach nameservers
« on: November 22, 2015, 12:35:44 PM »
I had the same issue too, but it has resolved itself now. Glad I wasn't the only one! It is this reason I wish HE had at least 1 out of its 5 name servers in a different AS.

General Questions & Suggestions / Re: Security of opening AXFR requests
« on: September 27, 2012, 02:45:24 AM »
The best way to do this is using tsig keys, however very few services support this so your next best option is to permit the ip address of the source of the axfr query.

Questions & Answers / Wildcard DNS records for paying customers
« on: April 24, 2012, 10:41:39 AM »
I have a paid account with HE and I am unable to create wildcard dns records for my domains. Is this is a bug or is this an official policy?

Is wildcarding still available to paying customers?

I was able to successfully register ipv6 glue records for my domain,, through Gandi.

note: i'm sorry chaz6, i think i'm not connected to what you've said before.i thought you've had trouble with ipv6 glue record things.i've read again your have problem with your registrar for not supporting ipv6 glue.that's my problem too untill now  ;D , i'm asking their technical support and got clueless answer hehehe...well, as long as there's workarround, it doesn't realy matter for me  ;)

In my case the registrar does not support out-of-bailiwick glue unless the glue is registered with the registry - it is not simply enough that the name resolves. Good luck with your registrar!

why did you use when your registrar is suporting for ipv6 glue directly?

Because it does not support ipv6 glue  ;) I tried and tried and tried, went several rounds with their support but in the end got nowhere.

Unfortunately not all registrars will let you assign glue records for your domain unless the glue is actually registered directly with the registry. I did initially try to use records in for my domain (, but I was not able to,. In the end I had to ask Ardya to register glue records for me with his own registrar.

I was however able to use records for domains in delegated from SixXS.

Following is the response I received from Gandi on the subject of registering out-of-bailiwick glue, copied verbatim:-

Code: [Select]
The reason why the registry is not accepting your DNS is because the registry PIR does not have your
glue records registered:

    dig A
    dig: couldn't get address for '': not found

You will therefore first need to assure that you have administratively declared your host at the
registry level, and then, once it has glue records, you will be able to apply it to your domain name
as desired.

(Yes, they made a mistake by substituting a period for a space, though the outcome would have been the same in any case. Yes their system is flawed because it requires at least an A record in addition to AAAA. Maybe someday they will fix it.)

IPv6 Basics & Questions & General Chatter / IPv6 DNS Glue
« on: July 11, 2009, 10:59:35 AM »
After going around in circles with my registrar Gandi, I was finally able to get IPv6 glue for my domain set up, no thanks to them. I was able to register glue records with another registrar (thanks to Ardya) and I was then able to apply them to my domain (

I would implore you to write or send an email to VeriSign (maintainer of com, net and edu) and ask that they consider requiring registrars to support the registration of IPv6 glue records. I had a response back saying that they have no plans to do so, but with enough support they might change their mind. VeriSign can be reached at

Pages: [1]