Re: Proposal: Fedora should install with IPv4/6 disabled by default [was: Re: Disabling ipv6]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



this is childish

there is a difference between well aware ipv4 and
all sorts of firewalls and proctections configured
or startup in a network with ipv6 enabled without
knowing it or not configured at all

coming up with a "link-local" address inside a network
which is *pure ipv4* on a server means *any* random
device which does the same may bypass all your firewall
rule ssince iptables and ip6tables are two different
services

F17/F18:
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1472
        inet 10.0.0.103  netmask 255.255.255.0  broadcast 10.0.0.255
        ether 00:50:56:bd:00:17  txqueuelen 1000  (Ethernet)
        RX packets 3131400  bytes 582391690 (555.4 MiB)
        RX errors 0  dropped 1428  overruns 0  frame 0
        TX packets 2548626  bytes 6720733855 (6.2 GiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
_______________________________________

F19 with F20-Kernel

*why?* there is no ipv6 configuration, BOOTPROTO=static is pretty clear
IPV6INIT=no states clear *no ipv6 for me*

eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.196.18  netmask 255.255.255.0  broadcast 192.168.196.255
        inet6 fe80::20c:29ff:fe30:82b9  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:30:82:b9  txqueuelen 1000  (Ethernet)
        RX packets 1437  bytes 117565 (114.8 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 1168  bytes 136471 (133.2 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

[root@rawhide ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth0
HWADDR=00:0c:29:30:82:b9
ONBOOT=yes
BOOTPROTO=static
TYPE=Ethernet
MODE=Managed
IPADDR=192.168.196.18
NM_CONTROLLED=no
IPV6INIT=no
NETMASK=255.255.255.0
GATEWAY=192.168.196.2
USERCTL=no
MTU=1500



Am 12.07.2013 18:09, schrieb J.Witvliet@xxxxxxxxx:
> If you got scared, why not keep the entire network down?
> If you want it, sure you can enable it ;-)
> 
> Enjoy your weekend.
> 
> -----Original Message-----
> From: users-bounces@xxxxxxxxxxxxxxxxxxxxxxx [mailto:users-bounces@xxxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Fernando Lozano
> Sent: Friday, July 12, 2013 5:50 PM
> To: users@xxxxxxxxxxxxxxxxxxxxxxx
> Subject: Proposal: Fedora should install with NETWORK [was IPv6] disabled by default [was: Re: Disabling ipv6]
> 
> Hi Chris,
> 
> [As I changed the subject, let me clear: NETWORK [was: IPv6] still compiled in the 
> kernel. Just the network interfaces configs that should come with NETWORK [was:IPv6] 
> disabled by default, if the user wants it should be easy to enable]


Attachment: signature.asc
Description: OpenPGP digital signature

-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux