Disable IPv6 on Debian VPS (Virtuozzo!)
Posted
by chris_l
on Server Fault
See other posts from Server Fault
or by chris_l
Published on 2010-04-10T17:24:37Z
Indexed on
2010/04/16
19:53 UTC
Read the original article
Hit count: 423
I have a Debian Lenny VPS, that's running virtualized by Parallels/Virtuozzo. Currently, the network interface doesn't have an IPv6 address - and that's good, because I don't have an ip6tables
configuration.
But I assume, that I could wake up one day, and ifconfig will show me an ipv6 address for the interface - because I have no control over the kernel or its modules - they're under the control of the hosting company. That would leave the server completely vulnerable to attacks from IPv6 addresses.
What would be the best way to disable IPv6 (for the interface or maybe for the entire host)? Usually I would simply disable the kernel module, but that's not possible in this case.
Update
Maybe I should add, that I can use iptables
and everything normally (I'm root on the VPS), but I can't make changes to the kernel or load kernel modules because of the way Virtuozzo works (shared kernel).
lsmod
always returns nothing.
I can't call ip6tables -L
(it says that I need to insmod, or that the kernel would have to be upgraded).
I don't think, that changes to /etc/modprobe.d/aliases
would have any effect, or do they?
Networking Config?
I thought, that maybe I can turn IPv6 off from /etc/network/... Is that possible?
I just see, that they've set up avahi, so I should probably change the setting use-ipv6=yes
to "no" in /etc/avahi/avahi.conf
(?)
Has anybody already tried this solution, and can I rely on it? I don't know too much about avahi. Would it actually have any effect? Or could it even bring my entire interface down, once IPv6 is enabled by the kernel?
© Server Fault or respective owner