From: Matthijs Kooijman <matthijs@stdin.nl>
Date: Thu, 18 Nov 2010 18:53:23 +0000 (+0100)
Subject: system: Don't accept ipv6 router advertisements.
X-Git-Url: https://git.stderr.nl/gitweb?a=commitdiff_plain;ds=sidebyside;h=e854328ebb8c1b04c330ea83bf973ead769746c6;p=matthijs%2Fservers%2Ftika.git

system: Don't accept ipv6 router advertisements.
---

diff --git a/etc/sysctl.d/ipv6.conf b/etc/sysctl.d/ipv6.conf
new file mode 100644
index 0000000..6690977
--- /dev/null
+++ b/etc/sysctl.d/ipv6.conf
@@ -0,0 +1,7 @@
+# Disable listening to routing advertisements on ipv6. The coloclue network
+# doesn't use them, so this prevents us from getting messed up when someone
+# else accidentally starts sending ras. Just setting default and all to 0
+# doesn't seem to work, so really disable all of them.
+net.ipv6.conf.all.accept_ra=0
+net.ipv6.conf.default.accept_ra=0
+net.ipv6.conf.eth0.accept_ra=0