> > > It might be a good idea, then, to configure ip6tables to deny everything and enable it just to be sure. >
And this is one of the reasons that firewalld has come about... The same rule (unless it specifies a family or has addressees in the rule of that family) gets applied to both protocols. It's time to stop ignoring it and treating ipv6 with the same level of care you do ipv4... If you really don't care about it then it's trivial to just have a drop all rule in ip6tables until you do care... Incidentally there are other reasons you may need ipv6 loaded on an ipv4 network that can cause headaches otherwise such as the bonding module that has a dependency on ipv6 being loaded these days...
-- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
