turning off IPv6

[John DeCarlo]

On 7/5/06, Alexander Skwar <listen at alexander.skwar.name> wrote:
>
> Christofer C. Bell wrote:
>
> > Other than people who are using it and the fact that simply having it
> > enabled presents no security concern whatsoever.
>
> That's not quite correct. Every running piece of software poses
> a potential security threat. Because of that, only *needed* software
> should run on a system. This way, the amount of attackable code gets
> minimized and security is increased. Even more so, if the software
> is accessible from the net - the IPv6 stack is potentially accessible.
>
> Now, having said, I'd agree that it's not a severe thread to have
> IPv6 running. It's just a matter of principles.
>

I agree that one should look at everything running on your system and turn
off that which you don't need right now.  Then turn it on when you do need
it.

That is the best overall way to run things.  But it requires more work than
most people are willing to do.

Ideally, IPv4 should be disabled out of the box.  It shouldn't be needed
anywhere, and it causes lots of problems today.




-- 
John DeCarlo, My Views Are My Own
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20060705/3262ab75/attachment.html>