[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Default value of net.ipv6.bindv6only should revert to 0



On Fri, Apr 09, 2010 at 04:14:57PM +0200, Marco d'Itri wrote:
> On Apr 08, Hendrik Sattler <post@hendrik-sattler.de> wrote:
> 
> > I also don't really see the issues with bindv6only=0. If you listen on  
> > all interfaces, it makes is easier. If you only listen on specific  
> > interfaces, it's not in the way.
> This is not true, the big problem with bindv6only=0 is that you will get
> IPv4 connections mapped in IPv6 so applications need to convert the
> addresses everywhere (logs, ACLs processing, etc).

They don't *need* to do that. It can just be documented that if you use
IPv6, you need to use the v4-in-v6-mapped syntaxis.

Granted, that's a bit ugly, but it does work.

-- 
The biometric identification system at the gates of the CIA headquarters
works because there's a guard with a large gun making sure no one is
trying to fool the system.
  http://www.schneier.com/blog/archives/2009/01/biometrics.html


Reply to: