{"id":3107,"date":"2014-06-06T14:41:13","date_gmt":"2014-06-06T06:41:13","guid":{"rendered":"http:\/\/rmohan.com\/?p=3107"},"modified":"2014-06-06T15:03:54","modified_gmt":"2014-06-06T07:03:54","slug":"how-to-disable-ipv6-on-rhel6-centos-6","status":"publish","type":"post","link":"https:\/\/mohan.sg\/?p=3107","title":{"rendered":"How-To disable IPv6 on RHEL6 \/ CentOS 6"},"content":{"rendered":"<p>in \/etc\/sysctl.conf  :  net.ipv6.conf.all.disable_ipv6 = 1<\/p>\n<p>in \/etc\/sysconfig\/network  : NETWORKING_IPV6=no<\/p>\n<p>in \/etc\/sysconfig\/network-scripts\/ifcfg-eth0 : IPV6INIT=\u201dno\u201d<\/p>\n<p>disable iptables6 \u2013 chkconfig \u2013level 345 ip6tables off<\/p>\n<p>reboot<\/p>\n<p>In \/etc\/grub.conf edit the kernel lines to include:<\/p>\n<p>1<br \/>\nipv6.disable=1<br \/>\nThe \u201ctrick\u201d here, as described by TrevorH1 in #linux, is that programs can still load the module as they wish. You can check this by running lsmod or modprobe -l, you will still see the ipv6.ko kernel module. This allows user mode programs to access the kernel module in their code (so they don\u2019t crash); but as far as the kernel is concerned ipv6.disable=1, so the kernel doesn\u2019t really allow much to get through it.<\/p>\n<p>And that\u2019s it. IPv6 is disabled on your box\u2026 but if you want to disable a variety of fun things that you might find when seeking to disable IPv6\u2026<\/p>\n<p>In \/etc\/sysctl.conf change\/create entries:<\/p>\n<p>net.ipv6.conf.all.disable_ipv6 = 1<br \/>\nnet.ipv6.conf.default.disable_ipv6 = 1<br \/>\nIn \/etc\/sysconfig\/network change\/create entries:<\/p>\n<p>NETWORKING_IPV6=no<br \/>\nIPV6INIT=no<br \/>\nIn \/etc\/modprobe.d\/blacklist.conf change\/create entries:<\/p>\n<p>blacklist net-pf-10<br \/>\nblacklist ipv6<br \/>\nDisable iptables for IPv6:<\/p>\n<p>service ip6tables stop<br \/>\nchkconfig ip6tables off<br \/>\nDisable ipv6 completely:<\/p>\n<p>echo &#8220;install ipv6 \/bin\/true&#8221; > \/etc\/modprobe.d\/ipv6_disabled.conf<\/p>\n","protected":false},"excerpt":{"rendered":"<p>in \/etc\/sysctl.conf : net.ipv6.conf.all.disable_ipv6 = 1<\/p>\n<p>in \/etc\/sysconfig\/network : NETWORKING_IPV6=no<\/p>\n<p>in \/etc\/sysconfig\/network-scripts\/ifcfg-eth0 : IPV6INIT=\u201dno\u201d<\/p>\n<p>disable iptables6 \u2013 chkconfig \u2013level 345 ip6tables off<\/p>\n<p>reboot<\/p>\n<p>In \/etc\/grub.conf edit the kernel lines to include:<\/p>\n<p>1 ipv6.disable=1 The \u201ctrick\u201d here, as described by TrevorH1 in #linux, is that programs can still load the module as they wish. You can [&#8230;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"_links":{"self":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/3107"}],"collection":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3107"}],"version-history":[{"count":2,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/3107\/revisions"}],"predecessor-version":[{"id":3113,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/3107\/revisions\/3113"}],"wp:attachment":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3107"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3107"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3107"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}