Bug#616687: marked as done (The webserver is listening on blacklisted ipv6)
Your message dated Mon, 7 Mar 2011 17:36:44 +0100
with message-id <20110307163643.GA25288@pcpool00.mathematik.uni-freiburg.de>
and subject line Re: Bug#616687: The webserver is listening on blacklisted ipv6
has caused the Debian Bug report #616687,
regarding The webserver is listening on blacklisted ipv6
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)
--
616687: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=616687
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: thttpd
Severity: normal
The thttpd web server appears to be listening for ipv6 traffic even though
the ipv6 kernel module is blacklisted and not loaded.
netstat -a|grep www
tcp6 0 0 [::]:www [::]:* LISTEN
^
This protocol is not supported on this LAN segment
The /etc/modprobe.d/blacklist.conf file contains the following entries:
blacklist ipv6
We should not be listening on ipv6 or displaying addresses in ipv6 format
when ipv6 is blacklisted within the kernel.
Mark.
-- System Information:
Debian Release: 6.0
APT prefers stable
APT policy: (990, 'stable'), (50, 'unstable'), (1, 'experimental')
Architecture: i386 (i386)
Kernel: Linux 2.6.38-rc6-486
Locale: LANG=en_GB, LC_CTYPE=en_GB (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/pdksh
Versions of packages thttpd depends on:
ii libc6 2.11.2-10 Embedded GNU C Library: Shared lib
ii logrotate 3.7.8-6 Log rotation utility
thttpd recommends no packages.
Versions of packages thttpd suggests:
pn thttpd-util <none> (no description available)
--- End Message ---
--- Begin Message ---
* Mark Hobley <markhobley@yahoo.co.uk> [110306 17:48]:
> The thttpd web server appears to be listening for ipv6 traffic even though
> the ipv6 kernel module is blacklisted and not loaded.
>
> netstat -a|grep www
> tcp6 0 0 [::]:www [::]:* LISTEN
If netstat shows this, ipv6 is enabled in the kernel. So this is not
thttp's fault.
> The /etc/modprobe.d/blacklist.conf file contains the following entries:
> blacklist ipv6
That only works if ipv6 is a module. With newer kernels it longer is a
module.
> Kernel: Linux 2.6.38-rc6-486
That seems more than new enough to no longer allow disabling of ipv6
this way. To verify try
grep CONFIG_IPV6= /boot/config-*
If that is a 'm' you can blacklist. If it is a 'y' you cannot blacklist.
The modern way to disable ipv6 is:
echo 'net.ipv6.conf.all.disable_ipv6 = 1' > /etc/sysctl.d/noipv6.conf
Bernhard R. Link
--- End Message ---
Reply to: