Ubuntu Security :: How To Disable IPv6 On 10.04
Aug 9, 2010Anyone know how to disable IPv6 but still use IPv4?
View 6 RepliesAnyone know how to disable IPv6 but still use IPv4?
View 6 RepliesOkay so on WebUpd8 website, (url), I found a way to disable IPv6 and I was hoping to get a little more of an understanding of if I should or not from comments there, but unfortunately I haven't gotten enough to say let's do that. So I figured I might get a better understanding on here.
I am not very familiar with IPv6, but to my understanding its a newer thing that's rarely found currently with ISPs, but can be a security issue now.
I have tried to disable the ipv6 support in ubuntu 9.04 32bit but the /etc/modprobe.d/aliases does not exist so I can't disable the suport as sugested for the previews versions. I need to disable it becouse it is pounding a total maihem in my vamware machines.
View 7 Replies View RelatedI am experiencing very slow internet speed while downloading files from internet. Although torrent (KTorrent) download speeds are okay. I am using 'rekonq' Web Browser. Konqueror is slower than this and Firefox is the slowest. Thats why I have uninstalled Firefox from my Suse 11.3 KDE. I went through the guides mentioned here:
Disable IPv6 But the images shown here in the first post (by caf4926) [URL] have slightly different configuration from my computer. (My account does not allow me to post attachments). In the pic 2, Do we have to select the option: "User Controlled with NetworkManager" before unchecking the Enable IPv6 option.
I have a host and typing ifconfig I get:
eth0 Link encap:Ethernet HWaddr 00:0E:7F:4F:E4:09
inet addr:130.130.9.9 Bcast:130.130.255.255 Mask:255.255.0.0
inet6 addr: fe80::20e:7fff:fe4f:e409/64 Scope:Link
[code]...
and to do a test i want to disable or delete the ipv6 address, but mainteining the other configured parameters. Looking on the ifcfg config file I have
DEVICE=eth0
BOOTPROTO=static
BROADCAST=130.130.255.255
[code]....
and nothing about IPv6... Then, using ifdown-ipv6 could i remove only the ipv6 address?
have had a problem with my ubuntu system recently in that it will only let me connect to the Internet through Firefox if I switch network.dns.disableIPv6 on. How do I do the equivalent in Ubuntu to enable me to use Ephiphany etc which are not working anymore
View 2 Replies View RelatedWhen I run OpenVPN server - tap0 adapter, it breakes Teredo(Miredo) IPv6 address down. I dont need IPv6 on OpenVPN, so is there any way to disable IPv6 on tap0 completely?
View 2 Replies View RelatedHowto disable IPV6 in Lenny?
I added this line:alias ipv6 off in /etc/modprobe.d/aliases:# cat /etc/modprobe.d/aliases
# These are the standard aliases for devices and kernel drivers.
# This file does not need to be modified.
#
# Please file a bug against module-init-tools if a package needs a entry
# in this file.
[Code]....
alias ipv6 offbut howto check after restart if ipv6 was loaded or not?
does opensuse 11.2 come with IPv6 enabled by default? where in the gnome gui can i access these settings?
Edit-i went into the gnome network manager applet and i cant find any IPv6 settings for any of my used connections-ethernet, wireless and VPN connections all seem to only IPv4. Can anyone else confirm that opensuse 11.2 uses only IPv4 on its network connections?
I just finished setting up my slack machine as a home server (printers & files) and I noticed that I have an IPv6 address (from ifconfig)... I didn't know I did. I used to work in tech support and when a windows or OSx machine didn't connect properly on a LAN, disabling IPV6 was a common troubleshooting step. Is there a way to easily turn inet6 connectivity off/on in Slackware? (I want to keep the ability to get an IPv6, we will all use those in the future)
View 2 Replies View RelatedI set up a static IPv6 address and a gateway in /etc/network/interfaces. However, a bad router in my network environment alway send wrong ICMP router discovery messages to me. So I have got extra (wrong) IPv6 address and gateway, and the routing is confused. On Windows Servers, I can use "netsh interface ipv6 set interface "Local Area Connection" routerdiscovery=disable" to disable ICMP router discovery. But I don't know how to disable it on Ubuntu 9.10. How could I disable ICMP router discovery for IPv6?
View 4 Replies View RelatedI have installed bind with yum install bind bind-chroot.I am having query timeouts due to no ipv6 connectivity.Is there a way to re-compile and not loose the chroot structure?Or is there another way to disable ipv6 lookups?Example of issue resulting in ipv4 query timeout:
30-Dec-2010 17:52:03.226 client x.x.x.x#53593: view internal: query: paypal.com.cms.local IN A +
30-Dec-2010 17:52:03.227 client x.x.x.x#53594: view internal: query: paypal.com.cms.local IN AAAA +
30-Dec-2010 17:52:03.228 client x.x.x.x#53595: view internal: query: paypal.com IN A +
[code]....
Now that IPv6 is becoming more and more common, I found the need to disable IPv6 on some interfaces but have it enabled on other. I found that /proc/sys/net/ipv6/conf/*/disable_ipv6 does exactly that. I am now wondering if anybody knows, why are networking scripts so counterintuitive. /etc/sysconfig/network has an option:
NETWORKING_IPV6=yes
All this option does is disable some ipv6 services (dhcpv6...), it does not disable IPv6 in whole (as one would assume...that's why you had to disable it with module parameters). Searching for more IP6 related config option, one can find that /etc/sysconfig/network-scripts/ifcfg-* scripts can contain:
IPV6INIT=yes
Again, this option does not disable IPv6 protocol on the interface, it just skips running ifup-ipv6/ifdown-ipv6 scripts. I added a /sbin/ifup-pre-local. Now, this script runs before ethX entries are created (other scripts run when it's already too late) in /proc directory, so it modifies default values which are then used after those entries are created:
#!/bin/bash
#
[ -f "/etc/sysconfig/network-scripts/$1" ] && . /etc/sysconfig/network-scripts/$1
[code]...
When I go out of town I normally take my Acer Netbook to travel light. I ran into a problem over the weekend which I have seen before and couldn't find the cause. I used the wifi at the house I was staying at and could connect to the router via Wicd and ping outside IP addresses, however, I could not connect to any websites with Iceweasel or Midori. I receive the generic error that the browser is unable to connect. Now that I am back at my house I cannot repeat the problem, but have found a couple threads about disabling ipv6 protocol. The symptoms sound like a browser setting, but I couldn't find any settings that looked unusual.
View 2 Replies View RelatedHow to enable ipv6 in snort. I read that it must compilate with --enable-ipv6 but still don't know how?
View 2 Replies View RelatedThere seems to be much disagreement between distros regarding how ipv6 is disabled, even between different versions of the same distro. Rather than just follow instructions for disabling ipv6 for a given distro, I would like to also test that ipv6 is not used any more. Any software or executable that relies on ipv6, that I can use to confirm that ipv6 has been successfully disabled?
View 9 Replies View RelatedIs simply adding "alias net-pf-10 off" to modprobe.conf enough to keep IPv6 completely dead? Should I comment out the IPv6 loopback address in /etc/hosts or anything like that?
View 9 Replies View RelatedI used to play with gw6c ( a client for tunnel broker ) It works well with fedora9 , fedora 10, but not with leonidas. my rpm is gw6c-6.0-0.4.beta4.fc9.i386.rpm ( a little old!) when I tried to install i have got this: libcrypto.so.7 est ncessaire pou w6c-6.0-0.4.beta4.fc9.i386 I try to make a soft link to libcrypto.so.0.9.8k, but nothing; The question :-Is there a solution for that pb - did you know a better client for non native ipv6 connectivity?
View 2 Replies View RelatedI have been struggling to get FC15 to act as an IPv6 router for a while now, am sure I am missing something trivial.. The idea is that I have a ppp / adsl connection (this works fine), use the wireless card on my pc with hostapd and dhcpd to provide connections to other pcs (works fine), and radvd to delegate ipv6 addresses.
The issue seem to be that as soon as I turn on ipv6 forwarding (net.ipv6.conf.all.forwarding =1), the ppp connection no longer gets an IPv6 address. This means the router cannot ping any ipv6 address outside my network.
If I disable ipv6 routing, my router gets an IPv6 address on its ppp connection, and can ping things such as ipv6.google.com just fine, however (of course) no packets are forwarded from my network and radvd complains that forwarding is disabled.
I am learning SELinux from LinuxCBT and I'm stuck at one place. Now video is on RHEL 4 (so tell me if things has changed since, cause I can't find anything related) shows how to disable SELinux security on httpd.first I don't know diff between initrc_t and uncofined_t; and second I don't know if something is wrong is everything is all right.
View 1 Replies View RelatedQuestion (and Google results aren't making this clear): Ubuntu has both iptables & ip6tables installed. 1. If I set a rule in iptables, does that rule also apply to ipv6, or just ipv4?
2. If "no" to above, then it would be prudent to *also* set ip6tables rules as well if I want to maintain an active firewall, correct?
3. Does ip6tables rules have the same syntax and behavior (more or less) to iptables rules - i.e. can I just copy my iptables rules & change "iptables" to "ip6tables"?
4. Any gotchas or issues that I should be aware of?
I need disable usb port access in ubuntu9.10. how to disable usb port in ubuntu9.10
View 9 Replies View RelatedI currently have a user on my Ubuntu server that I want to block completely from login. I know right now they login with SSH keys so they don't need to enter their SSH password. Can anyone tell me how to remove the SSH key login for their username and root user which I believe they use too and block SSH access alltogether.I will then just change the root SSH password.I'm terrified they will do some harm so I need them blocked out ASAP.
View 7 Replies View RelatedI've made an SSH server using OpenSSH on my desktop Ubuntu (10.4) for tunneling. However, I'm noticing that the public account I made for my SSH (one to give to friends to use proxy) has SFTP access to crucial system files. I'm okay with SFTP being enabled on my account, but not on this public account. Does anyone know of anyway to either disable SFTP to that user, or restrict access to important files?
View 4 Replies View RelatedSet up a few machines yesterday to test out some parallel code. Just for fun, I selected the "encrypt users files" option when setting up Ubuntu (10.10). I had never used the option in years past. Now I'm finding it a pain. EG., ssh requires me to already have a login to the machine before it will let me log in w/o a password (eg., using id_rsa.pub and authorized_keys).
Similarly, I have no reason to encrypt files on these machines. They're just crunching numbers. Is there an easy way to disable this? Or do I need to delete my original user and make another one (with all the su privelages, etc...) w/o an encrypted file system / home directory.
Is there a way to modify the ssh_config and sshd_config files so that a user can scp but will not be allowed to ssh. I have done a search and found a tool name scponly but I really do not want to install anything. Most of the books I have only discuss how to use ssh.
View 3 Replies View RelatedI've enabled the root account on Ubuntu 9.10, however I want to stop it from being used to login via GDM. 9.10 seems to have a different GDM version, how can I carry this out under 9.10
View 9 Replies View RelatedInspite i have read through the sticky link but i have a query.
Example,
If you have your firefox under enforce mode in apparmor,are you still able to install an update / addon to it to a newer version.
If not,how to disable the apparmor in firefox.Is it as below?
Code:
I have tried everything to disable automatic login from the login screen (gdm). I've changed my password, I've changed the settings in System -> Admin ->Login Screen, and I've edited /etc/gdm/custom.conf (gdm.conf doesn't exist, but I created it just in case!).No auto login is set up, but I can't get it to ask for my password. This is affecting my ability to switch sessions, as I can't switch sessions without clicking on my name in gdm, and because it's set to auto login,
View 4 Replies View RelatedHow do I disable showing Usernames? I want to be prompted for BOTH un and pw. If it is necessary I could just change it so that it boots into a fullscreen terminal so that you would have to input "startx" and then username and password. Or I could just change it through gui or 3rd party software.
View 7 Replies View Related