How to disable ipv6 in proxmox?

S

sa10

Renowned Member
Feb 6, 2009
48
0
71
Canada
My vz.conf
Code: 
 grep -i ipv6 /etc/vz/vz.conf 
## Enable IPv6
IPV6="no"
## IPv6 ip6tables kernel modules
http://fips.at/how-to-disable-ipv6-in-debian.html
Disabling IPv6 in the kernel

First you'll need to edit a couple of configuration files. If »/etc/modprobe.d/aliases« is present, look for this line:
alias net-pf-10 ipv6
Change it to this (with that one extra line):
alias net-pf-10 off
alias ipv6 off
If »/etc/modutils/aliases« is present, look for this line, uncomment it and add that one extra line:
# alias net-pf-10 off
alias ipv6 off
Now, IPv6 has been disabled in the kernel. Execute the following command and reboot:
# update-modules
Click to expand...
My /etc/modprobe.d/aliases
Code: 
##disable ipv6
#alias net-pf-10 ipv6
alias net-pf-10 off
alias ivp6 off
##
Unsuccessfully...
Code: 
ip a |grep inet6
    inet6 ::1/128 scope host 
    inet6 fe80::215:60ff:feac:565a/64 scope link 
    inet6 fe80::215:60ff:feac:565a/64 scope link 
    inet6 fe80::215:60ff:feac:565a/64 scope link 
    inet6 fe80::215:60ff:feac:565a/64 scope link 
    inet6 fe80::215:60ff:feac:565a/64 scope link 
    inet6 fe80::215:60ff:feac:565a/64 scope link
The second attempt ...
Code: 
echo "blacklist ipv6" >> /etc/modprobe.d/blacklist
reboot
Unsuccessfully...
and...
Code: 
lsmod | grep ipv6
ipv6                  342016  31 vzmon

modprobe --show-depends vzmon
insmod /lib/modules/2.6.24-2-pve/kernel/kernel/ve/vzdev.ko 
insmod /lib/modules/2.6.24-2-pve/kernel/net/ipv6/ipv6.ko 
insmod /lib/modules/2.6.24-2-pve/kernel/kernel/ve/vzmon.ko
How to disable ipv6 in proxmox?
 
My system
Code: 
VE0           eth0     eth1
                 \     /               /veth2003.0 - mailserver and other
   vmbr2-vlan123 -bond0--vlan111--brdmz--veth2002.0 -server DNS in DMZ
      |          /     \               \veth2001.1 - apache+tomacat....
      | (local)vlan5    vlan10          \-veth200X
      |         |           \             \-
      |      vmbr1         vmbr0(bridge)  |
      |        |             \            |
   veth101.3 veth101.2      veth101.1    veth101.0  Firewall
  (internet)  (loc net1)    (loc net2)    (dmz)
On VE101 - shorewall-4.25
shorewall message on starting:
Code: 
can't initialize ip6tables table `filter'
On my old server with gentoo on VE0 and openvz kernel without support ipv6 and everything OK.
Last version shorewall-4.26 (2009-02-15) - fist version with ipv6 support, and ... I am not assured....
 
message: can't initialize ip6tables table `filter' make ip6tables
Code: 
ip6tables -L
ip6tables v1.4.2: can't initialize ip6tables table `filter': iptables who? (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.
iptables (ipv4) - OK
Code: 
iptables -L | head
Chain INPUT (policy DROP)
target     prot opt source               destination         
dynamic    all  --  anywhere             anywhere            state INVALID,NEW 
net2fw     all  --  anywhere             anywhere            
loc2fw     all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED 
Drop       all  --  anywhere             anywhere            
LOG        all  --  anywhere             anywhere            LOG level info prefix `Shorewall:INPUT:DROP:' 
DROP       all  --  anywhere             anywhere
 
Because IPV6 is disabled?

IPV6="no"

Why do you enable ipv6 inside the container if you dont want it?
 
Yes, I agree, the ipv6 stuff seems to be keeping me from using shorewall/iptables in the Ubuntu 8.04 pre-configured OpenVZ container supplied by proxmox.
 
You must log in or register to reply here.
Top Bottom