Disabling ipv6

[Fernando Lozano]

Hi,

> On Tue, 2013-07-09 at 10:58 +0200, J.Witvliet at mindef.nl wrote:
>> Once in a while I see people suggesting the disabling of IPv6 to cope
>> with some issue.
>>  
>> My I _kindly_ ask not to do that anymore?
>> Even though such trick might take away the symptoms for you and me, it
>> is a technical overkill and only tackles the symptoms.
> In my case, I have a completely IPv4 network, and a complete
> impossibility to do IPv6 over the internet (I'd need an IP6 to 4 proxy
> *OUTSIDE* of my ISP).  So...
>
>
Somtimes we techinicians give advice based on an ideal world. :-) But on
the real world disabling IPv6 everywhere is the *right* thing to do for
many companies. if you don't have the need, don't have the knowledge and
your hardware/software doesn't support it well, IPv6 is not only
overhead with no added value but also may present a significant security
risk. Just like you should disable any system service (specially network
services) that you don't need to reduce a hacker attack surface on your
network and servers.


[]s, Fernando Lozano