Hi,

I'm new here so please be gentle...

I'm setting up a cPanel DNS Only server. When I run the CSF firewall security check, I get a message that ipv6 seems to be enabled, and therefore I should implement a few measures for security (ip6tables, etc.).

However, I don't see a need to even use ipv6, and I am not sure it's even fully supported here. It seems to me that it might be easier just to disable it. Is this possible, and if so, how?

My Linode is CentOS 5.5 32-bit.

Thanks,

Mark

See http://wiki.centos.org/FAQ/CentOS5#head ... 366b421dc4

_________________
Paid support
How to ask for help
1. Give details of your problem
2. Post any errors
3. Post relevant logs.
4. Don't hide details i.e. your domain, it just makes things harder
5. Be polite or you'll be eaten by a grue

Thanks. I was familiar with this in general, however:


On my Linode this line wasn't in /etc/sysconfig/network, as it is on other servers.

Should I just create it (set to "no" of course) and then follow the rest of the instructions?

Thanks.

Give it a go, I don't know how centos manages ipv6 see if it works if it doesn't yell and someone with more centos knowledge will probably pop up.

_________________
Paid support
How to ask for help
1. Give details of your problem
2. Post any errors
3. Post relevant logs.
4. Don't hide details i.e. your domain, it just makes things harder
5. Be polite or you'll be eaten by a grue

This worked for Debian Lenny. I don't know about Centos.
http://www.cyberciti.biz/tips/linux-how-to-disable-the-ipv6-protocol.html#comment-154806

Add these lines to /etc/sysctl.conf

#disable ipv6
net.ipv6.conf.all.disable_ipv6=1

and run

sysctl -p /etc/sysctl.conf

On further research I've seen that disabling it might cause issues.

Am I better off leaving it active and just using ip6tables? I'd really prefer not to have something active on my Linode if it isn't being used, but I wonder if this is the best way.

Is there actually an IPV6 address assigned to your Linode?

>> Is there actually an IPV6 address assigned to your Linode?

Not that I know of. I'm still new here so I'm not sure what goes on under the hood. But I just see the IPV4 address.

I've still heard that IPV6 should be deactivated if not in use...I'm no longer sure how true that is.

Thanks.

If it ain't broke don't fix it.

If ipv6 being enabled isn't causing you problems leave it alone.

_________________
Paid support
How to ask for help
1. Give details of your problem
2. Post any errors
3. Post relevant logs.
4. Don't hide details i.e. your domain, it just makes things harder
5. Be polite or you'll be eaten by a grue

Since you don't actually have any IPv6 connectivity, the only danger is from localhost. It'd be pretty easy to set up a couple firewall rules to kill all IPv6 traffic other than localhost, not that any exists in the first place.

_________________
Matt Nordhoff (aka Peng on IRC)

Thanks to everyone!