free
/
freedomboneeee
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Disable IP version 6

This commit is contained in:
Bob Mottram 2014-03-08 09:06:32 +00:00
parent 357e21f865
commit 7c4484c313
1 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
beaglebone.txt
View File

@ -502,9 +502,14 @@ echo 1 > /proc/sys/net/ipv4/tcp_syn_retries
# First of all delete any existing rules. # First of all delete any existing rules.
# This means you're back to a known state: # This means you're back to a known state:
iptables -P INPUT ACCEPT iptables -P INPUT ACCEPT
ip6tables -P INPUT ACCEPT
iptables -F iptables -F
iptables -X iptables -X
# Drop any IPv6 traffic
ip6tables -A INPUT -p tcp -j DROP
ip6tables -A INPUT -p udp -j DROP
# Drop access to unused ports # Drop access to unused ports
iptables -A INPUT -p tcp --destination-port 1 -j DROP iptables -A INPUT -p tcp --destination-port 1 -j DROP
iptables -A INPUT -p tcp --destination-port 7 -j DROP iptables -A INPUT -p tcp --destination-port 7 -j DROP
@ -615,7 +620,9 @@ echo 'iptables-restore < /etc/firewall.conf' >> /etc/network/if-up.d/iptables
chmod +x /etc/network/if-up.d/iptables chmod +x /etc/network/if-up.d/iptables
#+END_SRC #+END_SRC
Save and exit Save and exit.
Note that this will disable IP version 6. At the time of writing it is expected that the average internet user is running on IP version 4.
#+BEGIN_SRC: bash #+BEGIN_SRC: bash
chmod +x /tmp/firewall.sh chmod +x /tmp/firewall.sh
@ -646,6 +653,9 @@ And append the following:
#+BEGIN_SRC: bash #+BEGIN_SRC: bash
# ignore pings # ignore pings
net.ipv4.icmp_echo_ignore_all = 1 net.ipv4.icmp_echo_ignore_all = 1
# disable ipv6
net.ipv6.conf.all.disable_ipv6 = 1
#+END_SRC #+END_SRC
Save and exit. It may be a good idea to reboot at this point and then log back into the BBB using ssh. You can do a safe reboot of the system by typing: Save and exit. It may be a good idea to reboot at this point and then log back into the BBB using ssh. You can do a safe reboot of the system by typing:
@ -1210,7 +1220,7 @@ Then save and exit.
*** Rules for specific email addresses *** Rules for specific email addresses
You can also make a script which will allow you to add specific email addresses to a folder. You can also make a script which will allow you to move mail from specific email addresses to a folder.
#+BEGIN_SRC: bash #+BEGIN_SRC: bash
emacs /usr/bin/emailrule emacs /usr/bin/emailrule