Disable IPv6

[alikzn101]

HI Guys

From a security perspective is it advisable to disable IPv6 access to the server ?
Can IPTables be used to do this ?

Thanks
Al

[p.H]

From a security perspective is it advisable to disable IPv6 access to the server ?

Of course. But you must also disable IPv4 for better security.

Can IPTables be used to do this ?

No. ip6tables or nftables can drop all IPv6 packets but do not disable IPv6. The kernel parameter "ipv6.disable=1" disables IPv6 but may have issues with some programs which require the IPv6 kernel API. The kernel parameter "ipv6.ipv6_disable=1" (or disable_ipv6, not sure) disables IPv6 on all network interfaces by default but it might be re-enabled per-interface by the network manager configuration.

[Head_on_a_Stick]

The kernel parameter "ipv6.ipv6_disable=1" (or disable_ipv6, not sure) disables IPv6 on all network interfaces by default but it might be re-enabled per-interface by the network manager configuration.

It's ipv6.disable_ipv6=1. See also https://wiki.archlinux.org/index.php/IPv6#Disable_IPv6

[alikzn101]

Ok, maybe I should have asked DROP all IPv6 instead of disable. I don't want a case where I am writing rules for IPv4 and IPv6.