Disable IPv6 by default.

Dennis Gilmore dennis at ausil.us
Thu Sep 13 15:12:18 UTC 2007


On Thursday 13 September 2007 10:01:25 am Jóhann B. Guðmundsson wrote:
> John Reiser wrote:
> >> I use ipv6 daily.  why should i go through extra steps when having both
> >> enabled does not hurt people with ipv4 only connections?
> >
> > Perhaps you've heard of the recommended policy "turn off all unused
> > services"? Enabling IPv6 wastes RAM (several dozen pages) and is a
> > security risk when the only connections used are IPv4.
> >
> > Just publicize the easy OFF switch:
> > ----- /etc/modprobe.conf
> > alias net-pf-10 off
> > -----
>
> Hear Hear...
>
> Best regards.
>               Johann B.
Please provide proof of your claims.  where is the security risk?   Johann.  
why exactly do you want ipv6 disabled?  

Personally other than using it now.  i think that it will be a big step 
backwards if we disabled ipv6 by default.  for one thing the DOD has mandated 
that all there systems be running ipv6 by 2008 
http://www.networkworld.com/news/2005/080105-ipv6.html so you will see much 
faster acceleration of ipv6 services and usage within the next year since US 
govt contractors will need to have ipv6 to do there job.


Dennis




More information about the fedora-devel-list mailing list