Hi, nullv you can try to add "-A OUTPUT -m addrtype --dst-type MULTICAST -j DROP" / "-A OUTPUT -m pkttype --pkt-type multicast -j DROP" to ip6tables or try to remove multicast with ip maddr 2012/1/10 <nullv@xxxxxxx>: > Hi, > > I've been using radvd to set up a group of clients using RA broadcasts. I also have a group of client PCs using static IPv6 in a different ::/64 subnet altogether but on the same physical network. The two networks have to remain separate for security reasons. > > The problem I'm having is that clients on the two separate networks can still "see" each other through the automatic link-local (fe80::) addresses. I've added the line IPv6_AUTOCONF=no to network & my ifcfg-* files but I can't seem to stop this behaviour. > > Any hints, tricks, hacks, gotchas? > > Thanks > -- > users mailing list > users@xxxxxxxxxxxxxxxxxxxxxxx > To unsubscribe or change subscription options: > https://admin.fedoraproject.org/mailman/listinfo/users > Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines > Have a question? Ask away: http://ask.fedoraproject.org -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org