Re: [ds6] Disabling link local IPv6 addresses

2012-01-10 Thread nullv
Noted. So I guess the only way to properly secure the network is to have seperate physical media. Thanks --Original Message-- From: Peter Bieringer To: nu...@gmx.com Cc: d...@lists.deepspace6.net Cc: users@lists.fedoraproject.org Subject: Re: [ds6] Disabling link local IPv6 addresses Sent

Re: Disabling link local IPv6 addresses

2012-01-10 Thread Cameron Simpson
On 10Jan2012 10:00, nu...@gmx.com wrote: | I've been using radvd to set up a group of clients using RA | broadcasts. I also have a group of client PCs using static IPv6 in a | different ::/64 subnet altogether but on the same physical network. The | two networks have to remain separate for securit

Re: Disabling link local IPv6 addresses

2012-01-10 Thread Chris Adams
Once upon a time, nu...@gmx.com said: > I've been using radvd to set up a group of clients using RA broadcasts. I > also have a group of client PCs using static IPv6 in a different ::/64 subnet > altogether but on the same physical network. The two networks have to remain > separate for securit

Re: [ds6] Disabling link local IPv6 addresses

2012-01-10 Thread nullv
Used scope link instead of scope local & it worked :D I'll just have to chain it to my initscripts & I'm sorted --Original Message-- From: ZioPRoTo (Saverio Proto) To: nu...@gmx.com Cc: d...@lists.deepspace6.net Cc: users@lists.fedoraproject.org Subject: Re: [ds6] Di

Re: Disabling link local IPv6 addresses

2012-01-10 Thread nullv
Cool. That should work :D --Original Message-- From: My Name To: nu...@gmx.com To: Community support for Fedora users Subject: Re: Disabling link local IPv6 addresses Sent: Jan 10, 2012 12:15 PM Hi, nullv you can try to add "-A OUTPUT -m addrtype --dst-type MULTICAST -j DROP" /

Re: Disabling link local IPv6 addresses

2012-01-10 Thread Gilboa Davara
On Tue, Jan 10, 2012 at 2:29 PM, Gilboa Davara wrote: > On Tue, Jan 10, 2012 at 12:00 PM,   wrote: >> Hi, >> >> I've been using radvd to set up a group of clients using RA broadcasts. I >> also have a group of client PCs using static IPv6 in a different ::/64 >> subnet altogether but on the same

Re: Disabling link local IPv6 addresses

2012-01-10 Thread Gilboa Davara
On Tue, Jan 10, 2012 at 12:00 PM, wrote: > Hi, > > I've been using radvd to set up a group of clients using RA broadcasts. I > also have a group of client PCs using static IPv6 in a different ::/64 subnet > altogether but on the same physical network. The two networks have to remain > separate

Re: Disabling link local IPv6 addresses

2012-01-10 Thread My Name
Hi, nullv you can try to add "-A OUTPUT -m addrtype --dst-type MULTICAST -j DROP" / "-A OUTPUT -m pkttype --pkt-type multicast -j DROP" to ip6tables or try to remove multicast with ip maddr 2012/1/10 : > Hi, > > I've been using radvd to set up a group of clients using RA broadcasts. I > also have

Disabling link local IPv6 addresses

2012-01-10 Thread nullv
Hi, I've been using radvd to set up a group of clients using RA broadcasts. I also have a group of client PCs using static IPv6 in a different ::/64 subnet altogether but on the same physical network. The two networks have to remain separate for security reasons. The problem I'm having is tha