[ale] ipv6 dns requests???

[Robert L. Harris]

Alot of utilities out in the net look for an ipv6 device first by
default so as a result the kernel loads the module.

Geoff, try to rmmod the key then the ipv6.  If that still doesn't work
try and physcially move the ipv6.o module to /root or someplace outside
the tree, depmod -a and reboot.  Keep a rescue (knoppix) cd around just
in case though.

Personally I'd just set up a tunnel and use ipv6.  I've found very
little latency on high priority traffic and running IRC over ipv6
confuses some of the script kiddies.


Thus spake David Hamm (ale at spinnerdog.com):

> I've heard a popular trick of crackers is to use IPV6.  It goes undetected 
> since most aren't using it.  You might try using one of the rootkit tools to 
> see if the system has been root kited.  
> 
> Some security experts suggest deleting the IPV6 modules from /lib/modules 
> directories.  You could rename the IPV6 modules and reboot.  There is a 
> chance the system might not come back up but if you've been cracked you 
> probably want to re-load the system anyway.
> 
> http://www.net-security.org/software.php?id=531
> http://www.chkrootkit.org/
> 
> 
> 
> 
> On Tuesday 20 April 2004 07:54 am, Geoffrey wrote:
> > Robert L. Harris wrote:
> > > If you do "lsmod" is there anything related to ipv6?  If it's compiled
> > > in static you may not be able to disable it.
> >
> > Yeah, I've got:
> >
> > ipv6                  227392  -1 (autoclean)
> > key                    70456   0 (autoclean) [ipv6]
> >
> > I tried to remove them, but somethings got them busy.  I shutdown all
> > network services, still busy. :(
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale
> 
>  ** CRM114 Whitelisted by: ale at ale.org **
>  
>  ** ACCEPT: CRM114 Whitelisted by: ale at ale.org **
>  

:wq!
---------------------------------------------------------------------------
Robert L. Harris                     | GPG Key ID: E344DA3B
                                         @ x-hkp://pgp.mit.edu
DISCLAIMER:
      These are MY OPINIONS ALONE.  I speak for no-one else.

With Dreams To Be A King First One Should Be A Man
					- Manowar

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature