Discussions
Make 'AI Malware Filter' affecting A + AAAA for same domain
3 months ago by null
I've noticed that if 'AI Malware Filter' is enabled a domain gets only blocked by its IPv4 address (A record). The same domain was still resolvable with its original IPv6 address (AAAA record).
Wouldn't it make sense to block both (A + AAAA)? Otherwise it would be possible for the victim to fall back to IPv6 and still be able to open the blocked page.
Of course, this behavior could affect innocent sites if a malicious attacker were to exploit this behavior and enter a different IPv6.