On Wed, Sep 24, 2008 at 02:57:22PM -0600, Stephen John Smoogen wrote:
Not having ipv6 firewall means that you aren't protected if
someone
wants to walk your 'local' network via ipv6.
ping6 -I eth0 ff02::1
walk the hosts with no firewalls. I am guessing that turning off ipv6
altogether would be a better idea, but I do not know what effect that
has on things like ipsec etc.
No no no! IPv6 needs to stay on by default. We've had discussions
about this before. Please don't disable IPv6 by default.
And yes, this means that ip6tables should be on by default too, for
the exact reason Smooge points out above.