Hi, I wish to deactivate IPv6 networking completely and I have these settings now in sysconfig agika:/etc/sysconfig # cat SuSEfirewall2 | grep -i "ipv6" FW_IPv6="drop" FW_IPv6_REJECT_OUTGOING="yes" agika:/etc/sysconfig # cat windowmanager | grep -i "ipv6" KDE_USE_IPV6="no" If I understood well, these settings together ensure to (1. avoid the usage of ipv6 under the user's KDE session,) 2a. drop ipv6 stuff arriving from outside, 2b. reject ipv6 coming from inside (~going to outside). Is that right please? Is that enough, or would I need something in addition? Thanks, Pelibali
pelibali wrote:
I wish to deactivate IPv6 networking completely and I have these settings now in sysconfig
agika:/etc/sysconfig # cat SuSEfirewall2 | grep -i "ipv6" FW_IPv6="drop" FW_IPv6_REJECT_OUTGOING="yes"
agika:/etc/sysconfig # cat windowmanager | grep -i "ipv6" KDE_USE_IPV6="no"
If I understood well, these settings together ensure to (1. avoid the usage of ipv6 under the user's KDE session,) 2a. drop ipv6 stuff arriving from outside, 2b. reject ipv6 coming from inside (~going to outside).
Is that right please? Is that enough, or would I need something in addition?
If you really want to make sure that no IPv6 is active on your system, add the following lines to modprobe.conf.local: # We don't need and don't want no stinkin' IPv6. install sit0 /bin/true install ipv6 /bin/true install net-pf-10 /bin/true This will prevent that any IPv6 interface is established. Your software configures itself automatically to drop IPv6 support. Cheers, Joachim -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Joachim Schrod Email: jschrod@acm.org Roedermark, Germany
On Thu, 10 Nov 2005 06:12 am, pelibali wrote:
Hi,
I wish to deactivate IPv6 networking completely and I have these settings now in sysconfig
agika:/etc/sysconfig # cat SuSEfirewall2 | grep -i "ipv6" FW_IPv6="drop" FW_IPv6_REJECT_OUTGOING="yes"
agika:/etc/sysconfig # cat windowmanager | grep -i "ipv6" KDE_USE_IPV6="no"
Following an earlier thread I also have /etc/modprobe.conf.local with: # This turns IPv6 OFF install ipv6 /bin/true Stops _some_ of the ipv6 modules loading. Not all, anyone else know how to get rid of: ip6table_mangle 2432 0 ip6table_filter 2816 0 ip6_tables 18304 2 ip6table_mangle,ip6table_filter michaelj PS: Commetn all the IPv6 cruft out of /etc/hosts or "localhost" will be borken. -- Michael James michael.james@csiro.au System Administrator voice: 02 6246 5040 CSIRO Bioinformatics Facility fax: 02 6246 5166 No matter how much you pay for software, you always get less than you hoped. Unless you pay nothing, then you get more.
Michael James wrote:
Following an earlier thread I also have /etc/modprobe.conf.local with:
# This turns IPv6 OFF install ipv6 /bin/true
Turn off also net-pf-10 and sit0 Joachim -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Joachim Schrod Email: jschrod@acm.org Roedermark, Germany
On 11/09/2005 01:12 PM, pelibali wrote:
Hi,
I wish to deactivate IPv6 networking completely and I have these settings now in sysconfig
agika:/etc/sysconfig # cat SuSEfirewall2 | grep -i "ipv6" FW_IPv6="drop" FW_IPv6_REJECT_OUTGOING="yes"
In addition to the other suggestions, set these to "no" and "" respectively; otherwise, there are a couple of places in the firewall script that force most of the ipv6 netfilter modules to be loaded, regardless of the values of any other ipv6-related variables.
participants (4)
-
Darryl Gregorash -
Joachim Schrod -
Michael James -
pelibali