Re: IPv6 "out of the box" support (netbase requirement?)
Giacomo Mulas wrote:
> On Wed, 9 Jul 2003, Noah Meyerhans wrote:
> > What would the complaints be? It's not like these hosts entries are
> > intrusive in any way.
>
> Here is one: I have a carefully crafted firewalling script based on
> iptables, and I believe I am relatively safe with respect to insecure
> services; then you automagically add IPv6 support on my box and suddenly
> my box is open to the world (iptables only filters IPv4).
It's not about IPv6 support in the kernel, the matter at hand is if
there should be IPv6 entries in /etc/hosts.
Anyway, if Debian starts to ship default kernels with IPv6 support, it
must be backed with a capable ipmasq, and a loud warning indeed.
The only way I see IPv6 on Debian breaking every now and then is broken
or braindead DNS-information. For example: giving an AAAA address for
www.domain.com, but null routing IPv6 traffic, which leads to annoying
delays.
Ivo
--
/* I can't stand it anymore! Please can't we just write the
whole Unix system in lisp or something? */
- bash-2.02/unwind_prot.c
Reply to: