Disable IPv6: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
No edit summary |
||
| Line 7: | Line 7: | ||
net.ipv6.conf.eth0.disable_ipv6 = 1 | net.ipv6.conf.eth0.disable_ipv6 = 1 | ||
...</pre>to prevent configuration of IPv6 for listed interfaces. | ...</pre>to prevent configuration of IPv6 for listed interfaces. | ||
*To force <code>ntpd</code> to not use IPv6 add <code>-4</code> to | *To force <code>ntpd</code> to not use IPv6 add <code>-4</code> to the options of <code>ntpd</code> in the finction <code>ntpd_start</code> in <code>/etc/rc.d/rc.ntpd</code> | ||
< | |||
in <code>/etc/rc.d/rc.ntpd</code> | |||
*To force <code>sshd</code> to listen IPv4 only add | *To force <code>sshd</code> to listen IPv4 only add | ||
<pre>AddressFamily inet</pre> | <pre>AddressFamily inet</pre> | ||
Revision as of 22:28, 30 July 2022
- The kernel option
ipv6.disable=1disables the whole IPv6 stack - If using the kernel option is not possible, add the following parameters to
/etc/sysctl.conf:
# Disable IPv6 net.ipv6.conf.all.disable_ipv6 = 1 net.ipv6.conf.default.disable_ipv6 = 1 net.ipv6.conf.lo.disable_ipv6 = 1 net.ipv6.conf.eth0.disable_ipv6 = 1 ...
to prevent configuration of IPv6 for listed interfaces.
- To force
ntpdto not use IPv6 add-4to the options ofntpdin the finctionntpd_startin/etc/rc.d/rc.ntpd - To force
sshdto listen IPv4 only add
AddressFamily inet
to /etc/ssh/sshd_config
- To force
httpdto listen IPv4 only, specify an IPv4 address on all Listen directives, for example,
Listen 0.0.0.0:80
(in /etc/httpd/httpd.conf and/or /etc/httpd/extra/httpd-ssl.conf)
- To disable IPv6 in
bindadd-4toNAMED_OPTIONSin/etc/default/named, add
listen-on-v6 { none; };
to options in /etc/named.conf, and add
plugin query "/usr/lib64/named/filter-aaaa.so" {
filter-aaaa-on-v4 yes;
filter-aaaa-on-v6 yes;
};
after options in /etc/named.conf
- To disable IPv6 in
postfixuse the optioninet_protocolsin/etc/postfix/main.cf - To disable IPv6 in
sendmailuse the optionFamily=inetinDAEMON_OPTIONSandCLIENT_OPTIONS