-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi carlos,
If you are using SuSEfirewall2, you don't have to care. mh i read "somewhere" that susefirewall will in future releases not be installed as default? may i am wrong? and if this is correct it's only a matter of time it will be dropped...
AND, i have also some "raspian" (debian based for raspberry pi) running in the same net so susefirewall will not be the only firewall i have.
In "/etc/gai.conf" I changed:
precedence ::ffff:0:0/96 100
ok, this would be a option, but what is with (as example) ssh connections, i normally have inside hosts.deny and host.allow things related to ipv4, did this also work with ipv6? and where did i get static addresses to set such things? you see i do not know much.... examples: deny: sshd : ALL : deny allow: sshd : 192.168.0.81 : allow ...snip fro per jessen...
Did you really know everything you needed to know about ipv4 the first time you used that too?
you are right, answer is NO but there somehow in 1989 there was no need to look for holes...... only lan, without connection to the world..... simoN Am 19.01.2018 um 12:13 schrieb Carlos E. R.:
On 2018-01-19 09:58, Simon Becherer wrote:
Hi per,
Because, as you have seen, disabling ipv6 only causes problems. Besides, ipv6 does not 'run', it's only a protocol. It doesn't send anything in the background either.
mh, your arguments are ok, - it makes problems. - but if its running a lot of stuff is sendet across my lan with ipv6 adesses, i dont know who (kernel/program), i do not knwo why.
main reason to disable is i do not understand the ipv6 behavior, i actually only know its NOT only more address-space than ipv4 its much more, and i have no time to read all the stuff for ipv6 and so i do not know how to gave them static addresses, check / set firewall (iptables) for it etc.... so i decide better not use (at least at long it is possible).
But it does not matter if it works :-)
If you are using SuSEfirewall2, you don't have to care.
No need to assign static IPv6 addresses (yet).
Only if it tries to connect to some computer and it doesn't work and causes problems, is remove IPv6 support a consideration. But the first thing is finding why it does not work and solving that part instead.
Anyway, if your ISP and router don't have an IPv6 address, that traffic doesn't go outside, so no worries.
I have IPv6 enabled on the computer and I have no issues with it. In "/etc/gai.conf" I changed:
precedence ::ffff:0:0/96 100
which makes the system to prefer IPv4, I understand.
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (GNU/Linux) iQIcBAEBAgAGBQJaYfiEAAoJEOuDxDCJWQG+FpcP/i0WYlnjzZ1HvxrHYf1Lw3v2 3qrmccm1AZAjefdzFQwtjtRn9XbY44CyfXQr9RkEj0pSpA72CVu71JtcTFnsmY/v eGeP+WB1Pcrae3MsGq//+3P6aUwS5gdJZxAWfjYVHqThCQlH7QuUY9ZzYY07ZYhV 1+CAZ51TQwRq0msz8hmq7EU4wWwk5TGmP2jokmz+BKp6xtREz9v9Fc3eQrLwmoIa hcgXfFpiGh10nX3itaP9g/l4YdieuAHcLsLwPwzob1ZxmyeSjXw9oYCNW86jJFaI qfbTtNv+6GWsxu3Xbr0sg1UrDmP9V2tB+wH5sbpwYe9N2/bHtSirZyOJUUDKBYEo GFJLxvhLnCeALfk3pIHkpy8Uvi8o1LrpggcuYLDhduoGGpQEcdFp9K/FXd89NhyJ cUPLaZknv+fo6L3k7Fnt4rmeYa5vuIruCel4OPaRK35TaUBulYLsM1n6O+ULcmy7 Ce5LEODjM4kKTg1N5pOIg/KzBArhSgZ7przG8q4+aEHIDiWKYJOuZADlAoZHx1AY aa06UZrUYD0dH2XvNBdLQw2qyv+Z3ky5bMxY6YBpsJB6WhTJMTOfcUYoWZyxCBQH aMgOjoiWrJlBu4C+EC9QcWC0K+5bEmibnaDOkCliMU1gU+pG1ItqwCDyewdAtWyn TIhU64rTLF5haPfHGC+q =gkvP -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org