How to disable ipv6 in proxmox?

[sa10]

My vz.conf

 grep -i ipv6 /etc/vz/vz.conf 
## Enable IPv6
IPV6="no"
## IPv6 ip6tables kernel modules

http://fips.at/how-to-disable-ipv6-in-debian.html

Disabling IPv6 in the kernel

First you'll need to edit a couple of configuration files. If »/etc/modprobe.d/aliases« is present, look for this line:
alias net-pf-10 ipv6
Change it to this (with that one extra line):
alias net-pf-10 off
alias ipv6 off
If »/etc/modutils/aliases« is present, look for this line, uncomment it and add that one extra line:
# alias net-pf-10 off
alias ipv6 off
Now, IPv6 has been disabled in the kernel. Execute the following command and reboot:
# update-modules

My /etc/modprobe.d/aliases

##disable ipv6
#alias net-pf-10 ipv6
alias net-pf-10 off
alias ivp6 off
##

Unsuccessfully...

ip a |grep inet6
    inet6 ::1/128 scope host 
    inet6 fe80::215:60ff:feac:565a/64 scope link 
    inet6 fe80::215:60ff:feac:565a/64 scope link 
    inet6 fe80::215:60ff:feac:565a/64 scope link 
    inet6 fe80::215:60ff:feac:565a/64 scope link 
    inet6 fe80::215:60ff:feac:565a/64 scope link 
    inet6 fe80::215:60ff:feac:565a/64 scope link

The second attempt ...

echo "blacklist ipv6" >> /etc/modprobe.d/blacklist
reboot

Unsuccessfully...
and...

lsmod | grep ipv6
ipv6                  342016  31 vzmon

modprobe --show-depends vzmon
insmod /lib/modules/2.6.24-2-pve/kernel/kernel/ve/vzdev.ko 
insmod /lib/modules/2.6.24-2-pve/kernel/net/ipv6/ipv6.ko 
insmod /lib/modules/2.6.24-2-pve/kernel/kernel/ve/vzmon.ko

How to disable ipv6 in proxmox?

 

[dietmar]

Thats not possible. Why do you want that disabled?

 

[sa10]

IPV6 today - additional problems.
Later it may be....

 

[dietmar]

IPV6 today - additional problems.
Later it may be....

What problems do you have with our configuration?

 

[sa10]

My system

VE0           eth0     eth1
                 \     /               /veth2003.0 - mailserver and other
   vmbr2-vlan123 -bond0--vlan111--brdmz--veth2002.0 -server DNS in DMZ
      |          /     \               \veth2001.1 - apache+tomacat....
      | (local)vlan5    vlan10          \-veth200X
      |         |           \             \-
      |      vmbr1         vmbr0(bridge)  |
      |        |             \            |
   veth101.3 veth101.2      veth101.1    veth101.0  Firewall
  (internet)  (loc net1)    (loc net2)    (dmz)

On VE101 - shorewall-4.25
shorewall message on starting:

can't initialize ip6tables table `filter'

On my old server with gentoo on VE0 and openvz kernel without support ipv6 and everything OK.
Last version shorewall-4.26 (2009-02-15) - fist version with ipv6 support, and ... I am not assured....

 

[sa10]

message: can't initialize ip6tables table `filter' make ip6tables

ip6tables -L
ip6tables v1.4.2: can't initialize ip6tables table `filter': iptables who? (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.

iptables (ipv4) - OK

iptables -L | head
Chain INPUT (policy DROP)
target     prot opt source               destination         
dynamic    all  --  anywhere             anywhere            state INVALID,NEW 
net2fw     all  --  anywhere             anywhere            
loc2fw     all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED 
Drop       all  --  anywhere             anywhere            
LOG        all  --  anywhere             anywhere            LOG level info prefix `Shorewall:INPUT:DROP:' 
DROP       all  --  anywhere             anywhere

 

[dietmar]

Because IPV6 is disabled?

IPV6="no"

Why do you enable ipv6 inside the container if you dont want it?

 

[sa10]

IPV6="yes" turn off message:

can't initialize ip6tables table `filter'

 

[unleeshop]

Yes, I agree, the ipv6 stuff seems to be keeping me from using shorewall/iptables in the Ubuntu 8.04 pre-configured OpenVZ container supplied by proxmox.

 

[xcooling]

To enable IP6Tables and IPTables for OpenVZ containers, please view the following guide : http://extremeshok.com/blog/?p=810