News for hackers. Stuff that matters.

A comment on Thinking about our passive exposure to IPv6 issues. Parent comment

Re:Thinking about our passive exposure to IPv6 issues by nubinetwork on Wednesday April 26, 2023 @05:54AM (#35711439)
Why firewall it when you can straight up turn it off?

net.ipv6.conf.all.disable_ipv6 = 1 net.ipv6.conf.default.disable_ipv6 = 1

[ Parent | on HN ]
Re:Thinking about our passive exposure to IPv6 issues by brobinson on Wednesday April 26, 2023 @09:45PM (#35722256)
ipv6.disable=1 in kernel boot flags so the interfaces don't even show up
[ Parent | on HN ]
Re:Thinking about our passive exposure to IPv6 issues by nathants on Wednesday April 26, 2023 @10:36PM (#35722644)
disable via kconfig so it’s not even in kernel.
[ Parent | on HN ]
Re:Thinking about our passive exposure to IPv6 issues by nubinetwork on Thursday April 27, 2023 @05:30AM (#35725483)
I do this on Gentoo but nobody likes to run Gentoo in production.
[ Parent | on HN ]
Re:Thinking about our passive exposure to IPv6 issues by nubinetwork on Thursday April 27, 2023 @05:31AM (#35725500)
I do both of these on Ubuntu just in case one of them doesn't work, too many apt hooks constantly changing the kernel...
[ Parent | on HN ]