system: Really disable ipv6 router advertisements.

[matthijs/servers/drsnuggles.git] / etc / sysctl.conf

diff --git a/etc/sysctl.conf b/etc/sysctl.conf
index 971d61288f824e8d2ad979342cf76480510e38b4..fbfccf25781ee7c9422bc55ab2a4219a4001226e 100644 (file)
--- a/etc/sysctl.conf
+++ b/etc/sysctl.conf
@@ -1,26 +1,13 @@
-#
 # /etc/sysctl.conf - Configuration file for setting system variables
-# See sysctl.conf (5) for information.
-#
-
-#kernel.domainname = example.com
-#net/ipv4/icmp_echo_ignore_broadcasts=1
-
-# Uncomment the following to stop low-level messages on console
-#kernel.printk = 4 4 1 7
-
-##############################################################3
-# Functions previously found in netbase
-#
-
-# Uncomment the next line to enable Spoof protection (reverse-path filter)
-#net.ipv4.conf.default.rp_filter=1
-
-# Uncomment the next line to enable TCP/IP SYN cookies
-#net.ipv4.tcp_syncookies=1
-
-# Uncomment the next line to enable packet forwarding for IPv4
-#net.ipv4.conf.default.forwarding=1
-
-# Uncomment the next line to enable packet forwarding for IPv6
-#net.ipv6.conf.default.forwarding=1
+# See /etc/sysctl.d/ for additonal system variables
+# See Documentation/sysctl and Documentation/net/ip-sysctl.txt for more info on
+# the meaning of vars.
+
+# Disable listening to routing advertisements on ipv6. The coloclue network
+# doesn't use them, so this prevents us from getting messed up when someone
+# else accidentally starts sending ras. Just setting default and all to 0
+# doesn't seem to work, so really disable all of them.
+net.ipv6.conf.all.accept_ra=0                                                                                                                 
+net.ipv6.conf.default.accept_ra=0   
+net.ipv6.conf.eth0.accept_ra=0   
+net.ipv6.conf.eth1.accept_ra=0