Disable IPv6

New to Debian (Or Linux in general)? Ask your questions here!

Disable IPv6

Postby alikzn101 » 2020-10-15 10:19

HI Guys

From a security perspective is it advisable to disable IPv6 access to the server ?
Can IPTables be used to do this ?

Thanks
Al
alikzn101
 
Posts: 8
Joined: 2020-10-09 01:06

Re: Disable IPv6

Postby p.H » 2020-10-15 11:56

alikzn101 wrote:From a security perspective is it advisable to disable IPv6 access to the server ?

Of course. But you must also disable IPv4 for better security.

alikzn101 wrote:Can IPTables be used to do this ?

No. ip6tables or nftables can drop all IPv6 packets but do not disable IPv6. The kernel parameter "ipv6.disable=1" disables IPv6 but may have issues with some programs which require the IPv6 kernel API. The kernel parameter "ipv6.ipv6_disable=1" (or disable_ipv6, not sure) disables IPv6 on all network interfaces by default but it might be re-enabled per-interface by the network manager configuration.
p.H
 
Posts: 1489
Joined: 2017-09-17 07:12

Re: Disable IPv6

Postby Head_on_a_Stick » 2020-10-15 14:31

p.H wrote:The kernel parameter "ipv6.ipv6_disable=1" (or disable_ipv6, not sure) disables IPv6 on all network interfaces by default but it might be re-enabled per-interface by the network manager configuration.

It's ipv6.disable_ipv6=1. See also https://wiki.archlinux.org/index.php/IPv6#Disable_IPv6
Black Lives Matter

Debian buster-backports ISO image: for new hardware support
User avatar
Head_on_a_Stick
 
Posts: 12650
Joined: 2014-06-01 17:46
Location: /dev/chair

Re: Disable IPv6

Postby alikzn101 » 2020-10-15 17:04

Ok, maybe I should have asked DROP all IPv6 instead of disable. I don't want a case where I am writing rules for IPv4 and IPv6.
alikzn101
 
Posts: 8
Joined: 2020-10-09 01:06


Return to Beginners Questions

Who is online

Users browsing this forum: No registered users and 8 guests

fashionable