01Do not start by cutting IPv6
Turning IPv6 off removes the bypass, but takes IPv6 away from the whole network, silently: a server of the home published over IPv6 can no longer be reached, mail comes in slowly. Keep it for the very last resort.
02The right order
A link-local address (fe80::…) does not depend on your provider, but some boxes refuse it; a global address is accepted everywhere but changes with the prefix of the provider. On a Freebox: IPv6 configuration, tab IPv6 DNS, Force the use of custom IPv6 DNS servers.
- 1Note the IPv6 address of Warda: the card Network check of Network → Network analysis gives each one, with Copy.
- 2In the box, force the IPv6 DNS server to that address, and leave the second one empty.
- 3Only then turn IPv6 on, or back on, if it had been cut.
- 4Check (below).
03If the box cannot change it
- turn off only the announcement of its IPv6 DNS, when it offers it, and turn on the announcement of Warda (Network → DNS services);
- or put a router of your own behind the box, and set the IPv6 DNS it announces;
- cutting IPv6 only as the last resort, and never if a server of your network is published over IPv6.
04Check the result
The card Network check follows the change within 20 minutes (Check again asks at once). Turn the Wi-Fi of a computer off and on: its only IPv6 DNS servers must be addresses of Warda (ipconfig /all on Windows, scutil --dns on macOS, resolvectl dns on Linux). On Windows, this command must no longer show the address of the box on a line of the family 23 (IPv6):
Get-DnsClientServerAddress | Where-Object ServerAddresses | Format-Table InterfaceAlias, AddressFamily, ServerAddresses -AutoSize