system: Don't accept ipv6 router advertisements.

diff --git a/etc/sysctl.d/ipv6.conf b/etc/sysctl.d/ipv6.conf
new file mode 100644 (file)
index 0000000..6690977
--- /dev/null
+++ b/etc/sysctl.d/ipv6.conf
@@ -0,0 +1,7 @@
+# Disable listening to routing advertisements on ipv6. The coloclue network
+# doesn't use them, so this prevents us from getting messed up when someone
+# else accidentally starts sending ras. Just setting default and all to 0
+# doesn't seem to work, so really disable all of them.
+net.ipv6.conf.all.accept_ra=0
+net.ipv6.conf.default.accept_ra=0
+net.ipv6.conf.eth0.accept_ra=0