From: Matthijs Kooijman Date: Thu, 18 Nov 2010 18:53:23 +0000 (+0100) Subject: system: Don't accept ipv6 router advertisements. X-Git-Url: https://git.stderr.nl/gitweb?a=commitdiff_plain;h=e854328ebb8c1b04c330ea83bf973ead769746c6;p=matthijs%2Fservers%2Ftika.git system: Don't accept ipv6 router advertisements. --- diff --git a/etc/sysctl.d/ipv6.conf b/etc/sysctl.d/ipv6.conf new file mode 100644 index 0000000..6690977 --- /dev/null +++ b/etc/sysctl.d/ipv6.conf @@ -0,0 +1,7 @@ +# Disable listening to routing advertisements on ipv6. The coloclue network +# doesn't use them, so this prevents us from getting messed up when someone +# else accidentally starts sending ras. Just setting default and all to 0 +# doesn't seem to work, so really disable all of them. +net.ipv6.conf.all.accept_ra=0 +net.ipv6.conf.default.accept_ra=0 +net.ipv6.conf.eth0.accept_ra=0