Feature #6061

really block ipv6

Added by Tails 2013-07-18 07:50:05 . Updated 2013-07-19 01:25:45 .

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Target version:
Start date:
Due date:
% Done:

0%

Feature Branch:
Type of work:
Code
Blueprint:

Starter:
Affected tool:
Deliverable for:

Description

For whatever reason our firewall seems to not block all IPv6 packets, like it should. For instance, Tails leaks link-local multicast (ff02::1/64).

For now a simple solution to block this leak would be to disable IPv6 altoghether, i.e. by putting:

net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1

in /etc/sysctl.conf.

This was done in the bugfix/disable-IPv6 branch, merged into devel, done in Tails 0.16.

See enable IPv6 for the long-term plans.

Subtasks

History

#1 Updated by intrigeri 2013-07-19 01:25:45

  • Type of work set to Code

Type of work: Code