From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ed W Subject: Re: ipset, IP6_NF_IPTABLES Date: Tue, 17 May 2011 14:04:20 +0100 Message-ID: <4DD27254.1090706@wildgooses.com> References: <4DD256F7.7050007@googlemail.com> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: Sender: netfilter-owner@vger.kernel.org List-ID: Content-Type: text/plain; charset="us-ascii" To: Denys Fedoryshchenko Cc: Mr Dash Four , Jozsef Kadlecsik , netfilter@vger.kernel.org On 17/05/2011 12:14, Denys Fedoryshchenko wrote: > Especially it is a problem for source based distributions, like gentoo, I know there was a debate about this on the gentoo-hardened list recently, but my opinion is that one needs to start "enabling" (as in it's installed/compiled in) IPV6 code on all systems ASAP and start flushing out problems. That said I think it's also fair to lock down/disable/minimise your use of the IPV6 to whatever is appropriate to your environment/requirements, but having the code there, compiled into production systems and starting to test it would seem to be very prudent right now? Just add USE="+ipv6" to your make.conf, "emerge --newuse -uvDkp world" and off you go... Good luck Ed W