No, this isn't a thread asking OpenDNS to support IPv6. I've already posted in support of those threads.
This is a thread trying to explore some ideas to use IPv6 with OpenDNS filtering intact. Unfortunately I can't test any of them out right now since following a recent change in ISP I can't reestablish my IPv6 tunnel connection and the ISP isn't yet offering IPv6.
The first idea was inspired by a relatively recent conversation in here, though it wasn't related to IPv6. Basically it was using "firewall" type rules to block all port 53 traffic to non-OpenDNS addresses, and only allow port 53 to OpenDNS addresses. Could a similar technique be used for IPv6, only this time filtering all IPv6 port 53 traffic? My thinking is that even with IPv6 enabled, the DNS traffic would be forced to go out via IPv4, thus allowing OpenDNS to filter it. Of course it would require a firewall or router that could process that type of IPv6, which might be a challenge to find. My biggest concern is about performance, since IPv6 DNS lookups would first have to be rejected before IPv4 could be tried (unless IPv4 and IPv6 requests were sent at the same time, but I'm uncertain how the various OSes would handle that).
The second option I think is preferable, since it sidesteps questions of which OS is used, and whether or not the original request is made being IPv4 or IPv6. Why not use DNSCrypt. I'm not an expert on DNSCrypt, but it appears that it only connects to a single IP address, and with the implementation on my router you choose from a limited set of DNS providers. The list for OpenDNS included IPv4, IPv6, and FamilyShield. Since DNSCrypt essentially functions as a DNS forwarder for the rest of your network, regardless of how the traffic reaches it, it then sends it you specific. In this case I don't think it would matter if the original request was via IP4 or IPv6 since it would send it along via IPv4, which could then be filtered by OpenDNS. It should return AAAA and A records for the lookup, and if you are using IPv6 the actual internet connection could be made by IPv6. As a side effect security is enhanced since the traffic between your network and OpenDNS is encrypted, validating that it's received unchanged by any man in the middle.
Thoughts?
