I've added blacklist ipv6 to my blacklist.conf file to keep the ipv6 module from loading, but there's a lot of other modules related to ipv6 as well that I'd like to know if I can add to the list as well. For example: ip6t_LOG ip6t_rt ip6table_filter ip6_tables Is it safe to unload these modules as well or are they needed for proper and safe functionality of iptables and ipv4?
Tell me more
×
Ask Ubuntu is a question and answer site for
Ubuntu users and developers. It's 100% free, no registration required.
|
|
||||
|
|
|
(One wonders why you want to blacklist IPv6. Isn't IPv6 what we're all supposed to be migrating to?) Those other modules aren't necessary for IPv4 functionality, so you can safely blacklist them. On the other hand, you shouldn't need to bother blacklist them because nothing should be causing them to load anyway unless you're trying to configure some ip6tables rules... and even if they load, they won't have any effect anyway if there is no IPv6 packet processing going on. |
|||||||
|