-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On Fri, 4 Jan 2013, Patrick Lists wrote:
On an up-to-date F17 x86_64 box I was testing IPv6 and it was pointed
out that
the IPv6 address that Fedora uses is traceable because it ends in the MAC
address of the nic. I don't like that and want to enable privacy extensions
which should replace the MAC address with some random stuff in the IPv6
address.
I added the following to /etc/sysctl.d/ipv6_privacy_extensions and rebooted:
net.ipv6.conf.default.use_tempaddr = 1
net.ipv6.conf.default.temp_prefered_lft = 7200
Unfortunately this does not work as I don't see an IPv6 address with "scope
global dynamic" and if I go to
http://ip6.nl then it still shows my IPv6
address with the MAC address in it.
Anyone know how to make this work?
Add:
IPV6_PRIVACY=rfc3041
to /etc/sysconfig/network-scripts/ifcfg-nicN
Restart the network service (I never tested this with NetworkManager).
Gabriel
- --
// Gabriel VLASIU
//
// OpenGPG-KeyID : 44952F15
// OpenGPG-Fingerprint: 4AC5 7C26 2FE9 02DA 4906 24B2 D32B 7ED7 4495 2F15
// OpenGPG-URL :
http://www.vlasiu.net/public.key
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)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=Rpc0
-----END PGP SIGNATURE-----