IPv6 Reverse DNS lookup cross VLAN

[henrikwidlund]

My DNS server is on its own VLAN, I've therefore used the private_networks setting to specify which IP ranges should be considered as private, even though the IPs are actually public (Link Local doesn't work cross VLAN). This works to some extent, I can do a dig -x returns an entry when the query is made for the DNS server itself, but any other address still returns SOA fake-for-negative-caching.adguard.com.. This happens regardless of whether I query the DNS server via its IPv4 or IPv6 address. I've added Private DNS Servers for both IPv4 and IPv6.

To me it seems like it allows me to do reverse lookups from a public IPv6 address specified in the private_networks, but the application doesn't query my routers' DNS server to resolve them.

Example:

; <<>> DiG 9.10.6 <<>> -x XXXX:XXXX:XXXX:bd02::5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30049
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;XXXX....ip6.arpa. IN PTR

;; AUTHORITY SECTION:
XXXX....ip6.arpa. 10 IN SOA fake-for-negative-caching.adguard.com. hostmaster.XXXX....ip6.arpa. 100500 1800 900 604800 86400

;; Query time: 2018 msec
;; SERVER: XXXX:XXXX:XXXX:bd01::2#53(XXXX:XXXX:XXXX:bd01::2)
;; WHEN: Mon Jan 20 20:19:54 CET 2025
;; MSG SIZE  rcvd: 185