Disable IPv6
- The kernel option
ipv6.disable=1disables the whole IPv6 stack - If using the kernel option is not possible, add the following parameters to
/etc/sysctl.conf:
# Disable IPv6 net.ipv6.conf.all.disable_ipv6 = 1 net.ipv6.conf.default.disable_ipv6 = 1 net.ipv6.conf.lo.disable_ipv6 = 1 net.ipv6.conf.eth0.disable_ipv6 = 1 ...
to prevent configuration of IPv6 for listed interfaces.
- To configure glibc to prefer ipv4 over ipv6 creat
/etc/gai.conf:
# Always prefer IPv4 connections precedence ::ffff:0:0/96 100
- To force
ntpdto not use IPv6 add-4to the options ofntpdin the finctionntpd_startin/etc/rc.d/rc.ntpd
- Also comment out 2 lines in
/etc/ntp.conf:
#restrict -6 default limited kod nomodify notrap nopeer noquery #restrict ::1
- To force
sshdto listen IPv4 only add
AddressFamily inet
to /etc/ssh/sshd_config
- To force
httpdto listen IPv4 only, specify an IPv4 address on all Listen directives, for example,
Listen 0.0.0.0:80
(in /etc/httpd/httpd.conf and/or /etc/httpd/extra/httpd-ssl.conf)
- To disable IPv6 in
bindadd-4toNAMED_OPTIONSin/etc/default/named, add
listen-on-v6 { none; };
to options in /etc/named.conf, and add
plugin query "/usr/lib64/named/filter-aaaa.so" {
filter-aaaa-on-v4 yes;
filter-aaaa-on-v6 yes;
};
after options in /etc/named.conf
- To disable IPv6 in
postfixuse the optioninet_protocolsin/etc/postfix/main.cf - To disable IPv6 in
sendmailuse the optionFamily=inetinDAEMON_OPTIONSandCLIENT_OPTIONS