Linode Forum
https://forum.linode.com/

Disable ipv6
https://forum.linode.com/viewtopic.php?f=19&t=6638
Page 1 of 1

Author:  markb1439 [ Tue Feb 01, 2011 4:59 am ]
Post subject:  Disable ipv6

Hi,

I'm new here so please be gentle...

I'm setting up a cPanel DNS Only server. When I run the CSF firewall security check, I get a message that ipv6 seems to be enabled, and therefore I should implement a few measures for security (ip6tables, etc.).

However, I don't see a need to even use ipv6, and I am not sure it's even fully supported here. It seems to me that it might be easier just to disable it. Is this possible, and if so, how?

My Linode is CentOS 5.5 32-bit.

Thanks,

Mark

Author:  obs [ Tue Feb 01, 2011 1:53 pm ]
Post subject: 

See http://wiki.centos.org/FAQ/CentOS5#head ... 366b421dc4

Author:  markb1439 [ Tue Feb 01, 2011 6:09 pm ]
Post subject: 

Thanks. I was familiar with this in general, however:

Quote:
Edit /etc/sysconfig/network and set "NETWORKING_IPV6" to "no"

On my Linode this line wasn't in /etc/sysconfig/network, as it is on other servers.

Should I just create it (set to "no" of course) and then follow the rest of the instructions?

Thanks.

Author:  obs [ Tue Feb 01, 2011 9:41 pm ]
Post subject: 

Give it a go, I don't know how centos manages ipv6 see if it works if it doesn't yell and someone with more centos knowledge will probably pop up.

Author:  oak [ Wed Feb 02, 2011 12:07 am ]
Post subject: 

This worked for Debian Lenny. I don't know about Centos.
http://www.cyberciti.biz/tips/linux-how-to-disable-the-ipv6-protocol.html#comment-154806

Add these lines to /etc/sysctl.conf

#disable ipv6
net.ipv6.conf.all.disable_ipv6=1

and run

Code:
sysctl -p /etc/sysctl.conf

Author:  markb1439 [ Wed Feb 02, 2011 12:47 pm ]
Post subject: 

On further research I've seen that disabling it might cause issues.

Am I better off leaving it active and just using ip6tables? I'd really prefer not to have something active on my Linode if it isn't being used, but I wonder if this is the best way.

Author:  waldo [ Wed Feb 02, 2011 12:49 pm ]
Post subject: 

Is there actually an IPV6 address assigned to your Linode?

Author:  markb1439 [ Wed Feb 02, 2011 8:12 pm ]
Post subject: 

>> Is there actually an IPV6 address assigned to your Linode?

Not that I know of. I'm still new here so I'm not sure what goes on under the hood. But I just see the IPV4 address.

I've still heard that IPV6 should be deactivated if not in use...I'm no longer sure how true that is.

Thanks.

Author:  obs [ Thu Feb 03, 2011 1:52 am ]
Post subject: 

If it ain't broke don't fix it.

If ipv6 being enabled isn't causing you problems leave it alone.

Author:  mnordhoff [ Thu Feb 03, 2011 2:26 am ]
Post subject: 

Since you don't actually have any IPv6 connectivity, the only danger is from localhost. It'd be pretty easy to set up a couple firewall rules to kill all IPv6 traffic other than localhost, not that any exists in the first place.

Author:  markb1439 [ Thu Feb 03, 2011 2:34 am ]
Post subject: 

Thanks to everyone!

Page 1 of 1 All times are UTC-04:00
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/