Tell me more ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.
up vote 1 down vote favorite

I'm sure that in my network I will not use IPv6 only IPv4. So according to the KISS principle I will need to disable it. How can I do it? OS is OpenBSD 5.1.

share|improve this question

2 Answers

up vote 0 down vote accepted 
 -inet6          Disable inet6(4) on the given interface and remove all
                 configured inet6(4) addresses, including the link-local
                 ones.  To turn it on again, assign any inet6 address or
                 run rtsol(8).

this if from `man ifconfig'.

 family      Specify which type of Internet protocol family to prefer, if
             a host is reachable using different address families.  By
             default IPv4 addresses are queried first, and then IPv6
             addresses.  The syntax is:

                   family family1 [family2]

             A maximum of two families can be specified, where family can
             be any of:

                   inet4     IPv4 queries.
                   inet6     IPv6 queries.

this is from `man resolv.conf'

Customer kernel is not OpenBSD way to go! Do not ever ask for help with customer kernel, you don't understand technical details anyway :)

share|improve this answer
up vote 3 down vote

You must build a custom kernel that lacks the INET6 option. But the OpenBSD maintainers seem to advise against this.

share|improve this answer
aren't there any solution to "blacklist" IPv6 support? The only solution is to build a custom kernel? – gasko peter May 9 '12 at 2:46
Well, if you mean packet filtering, I think you can use pf.conf to filter against any protocol that's in /etc/protocols and ipv6 is in there. I haven't tried it, however. – Kyle Jones May 9 '12 at 2:58
Proposing customer kernel is bad, especially for people who even don't know anything about it. OpenBSD is well prepared to just work. If you are not filtering IPv6 in firewall anyway, or any outgoing traffic then what kind of admin you are? IIRC teredo on M$ creates its own IPv6 tunneled outgoing traffic = nice backdoor in your private network. According to a survey only 20 % of network administrators really know what kind of data is leaving their network :-) This is ridiculous, especially when everybody is obsessed with filtering incomming ports scan etc. – Jiri Xichtkniha May 18 '12 at 20:09

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.