12 Jun
2013
12 Jun
'13
7:40 a.m.
Trent W. Buck <trentbuck@gmail.com> wrote:
$ sysctl net.ipv6.conf.eth1.disable_ipv6=1 deleted all IPv6 addresses from eth1, including the link-local addresses.
Ah, thanks. I remember that was the (Debian-)recommended way to blanket disable IPv6 on a system, before it was added a /proc/cmdline option. That seems like a pretty safe approach.
Another safe approach, on the router, would be ip6tables -A OUTPUT -o eth1 -j DROP ip6tables -A FORWARD -o eth1 -j DROP ip6tables -A INPUT -o eth1 -j DROP but my IPTables knowledge is hazy - I think the above should be enough to do it however.