please deactivate services by default!

[Chuck Anderson]

On Wed, Sep 24, 2008 at 02:57:22PM -0600, Stephen John Smoogen wrote:
> Not having ipv6 firewall means that you aren't protected if someone
> wants to walk your 'local' network via ipv6.
> 
> ping6 -I eth0 ff02::1
> 
> walk the hosts with no firewalls. I am guessing that turning off ipv6
> altogether would be a better idea, but I do not know what effect that
> has on things like ipsec etc.

No no no!  IPv6 needs to stay on by default.  We've had discussions 
about this before.  Please don't disable IPv6 by default.

And yes, this means that ip6tables should be on by default too, for 
the exact reason Smooge points out above.