[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: IPV6INIT=no, but does anyway on local network



On Sat, 2008-10-04 at 23:26 +0800, edwardspl ita org mo wrote:
> Hello,
> 
> After FC8 System, there is no /etc/modprobe.conf ( default hand by
> system ), the user may use the GUI ( NOT text mode ) tool or modify
> ifcfg-eth* file for it...
> 
> Edward.
> 

Edward,

You may want to actually "try" the advice before summarily dismissing
it.

True, that in F9 there is no "default" /etc/modprobe.conf, but if you
simply place the following two lines in that newly created file, it will
prevent the ipv6 kernel module from loading:

alias ipv6 off
alias net-pf-10 off

Again, I am not sure about the current need for the second line.  I have
not tried it, but placing the module names in
the /etc/modprobe.d/blacklist file may also achieve the same results.

Understand that the entry in the ifcfg-* files which you are so fond of
only prevents the use of the "other" forms of autoconfiguration like
dhcpv6 and router advertisements.  You will still get a "Link-Local"
address that while not routable will still leave you exposed to
connections from other IPv6 machines on the local LAN, which is part of
the "discussion" currently going on fedora-devel about the need for
ip6tables to be started automatically on a default install.  You must
prevent the kernel module from loading into memory if you want to stop
the creation of Link-Local addresses.

--Rob



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]