Proposal: Fedora should install with IPv4/6 disabled by default [was: Re: Disabling ipv6]

Reindl Harald h.reindl at thelounge.net
Sat Jul 13 22:39:19 UTC 2013



Am 14.07.2013 00:33, schrieb David Beveridge:
> On Sat, Jul 13, 2013 at 2:36 AM, Reindl Harald <h.reindl at thelounge.net> wrote:
>> coming up with a "link-local" address inside a network
>> which is *pure ipv4* on a server means *any* random
>> device which does the same may bypass all your firewall
>> rule since iptables and ip6tables are two different
>> services
>>
> so grow up and run an ipv6 firewall.
> or go back to a much older distro

keep your polemic for you!

it is *the wrong* way to need setup firewalls for
unused things - they have to be *disabled* entirely

period

>> F19 with F20-Kernel
>>
>> *why?* there is no ipv6 configuration, BOOTPROTO=static is pretty clear
>> IPV6INIT=no states clear *no ipv6 for me*
>>
> I think you're barking up the wrong tree,
> take your arguement to kernel.org
> IPv6 Init is done in the kernel before initscripts even runs

oh the kernel knows before the initscripts which interfaces
are brougth up by them - interesting and funny theory!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 263 bytes
Desc: OpenPGP digital signature
URL: <http://lists.fedoraproject.org/pipermail/users/attachments/20130714/77926afe/attachment.sig>


More information about the users mailing list