Re: How to disable IPv6?

Previous thread: HP Mini Touchpad Broken in Recent Snapshots by Brad Tilley on Saturday, December 5, 2009 - 9:19 am. (5 messages)

Next thread: building sbin/route on -current? by James Hartley on Saturday, December 5, 2009 - 12:55 pm. (7 messages)
From: rhubbell
Date: Saturday, December 5, 2009 - 12:25 pm

I have disabled IPv6 in the kernel (via top-level GENERIC) but I can't
see what other places it needs to be disabled for other applications.
Is it enabled per-application or is there some magic in a top-level
Makefile somewhere? This IPv6 is like Whak-A-Mole. Or is it just so
pervasive now that it cannot be disabled? I don't have a need to
partake in the IPv6 "research" right now.

For all you IPv6 cheerleaders, please just resist the temptation to
cheer this time. I promise I'll re-enable the shit when my toaster
does IPv6.

From: STeve Andre'
Date: Saturday, December 5, 2009 - 12:39 pm

Future intelligent toast makers aside, why do you want to do this?
You aren't going to save much memory unless you're running on some
486 based system, and you will have created a frankensystem, that is
one which the OpenBSD community isn't going to be enthusiastic about
helping you.

You are free of course to make mods, but please understand that you
are on your own for them.  I suppose it could also be said that if
you need help in turning ipv6 off, you shouldn't--learn first how
things work before making such a modification.  I don't think most
of the people reading this are ipv6 fans, either.

--STeve Andre'

From: rhubbell
Date: Saturday, December 5, 2009 - 1:07 pm

On Sat, 5 Dec 2009 14:39:39 -0500


So you don't know, but couldn't resist the reply.... (^:

From: STeve Andre'
Date: Saturday, December 5, 2009 - 1:28 pm

To be honest, I have never tried.

There was a time back in 1999 when made 'shrimp' kernels to save space
by eliminating all the drivers I thought I didn't need.  Things seemed
to be going ok for several weeks with it, till I crashed the kernel
somehow.  I was very puzzled, but had the presence of mind to build a
stock generic kernel and see if that worked, before talking about it
on misc@.  The generic kernel worked flawlessly, doing everything ok
when the shrimp kernel worked.  Oops.

That taught me several things, being twiddling knobs (taking drivers
from the kernel surely constitues that) blindly can lead to interesting
consequences down the line, and that making the shrimp kernel was 
mostly a waste of time, except for the educational aspects of what not
to do.

--STeve Andre'

From: rhubbell
Date: Saturday, December 5, 2009 - 1:44 pm

On Sat, 5 Dec 2009 15:28:09 -0500

Thanks for the nice story.  I get a kick out of how far folks here go out
of their way not to help people out. Instead offering up non-sequitars,
etc.

Come on admit it, you don't know how to disable IPv6.  Why does everyone
place so much trust in OpenBSD when the kernel seems to be a mystery to
most here with constant warnings about not fiddling with it....

Curiouser and curiouser.

From: Jussi Peltola
Date: Saturday, December 5, 2009 - 1:52 pm

At least some developers hang on misc@ and surely know how to disable
ipv6. The question is: do they care?

From: Johan Beisser
Date: Saturday, December 5, 2009 - 1:58 pm

In my experience, no.

From: Ted Unangst
Date: Saturday, December 5, 2009 - 3:01 pm

Other than adding rhubbell to the list of "people who probably broke
it themselves", not really.

From: rhubbell
Date: Saturday, December 5, 2009 - 3:43 pm

On Sat, 5 Dec 2009 17:01:34 -0500

Nothing's broken here. Hope you didn't strain a muscle jumping to
conclusions. (^:  Well nothing other than the pervasiveness of IPv6 into
every nook and cranny with no apparent way to shut it off by pulling one
switch.

Also looking back I see the question was ignored before.
I can figure it out with enough time.  But guess I thought there was a
community here that would share the secret incantations.  Apparently
there's unity with out the comm.

From: bofh
Date: Saturday, December 5, 2009 - 4:11 pm

User:  there's a knob I want to twiddle, but don't know how...
Community:  Don't

User:  but I wanna, I wanna.
Developers:  don't, really

User:  I know what I'm doing, so there
Community: .....

User:  why is everyone ignoring me?  Where's the love?
Everyone:  it's hard to love the village idiot


-- 
Sent from my mobile device

http://www.glumbert.com/media/shift
http://www.youtube.com/watch?v=tGvHNNOLnCk
"This officer's men seem to follow him merely out of idle curiosity."
-- Sandhurst officer cadet evaluation.
"Securing an environment of Windows platforms from abuse - external or
internal - is akin to trying to install sprinklers in a fireworks
factory where smoking on the job is permitted."  -- Gene Spafford
learn french:  http://www.youtube.com/watch?v=30v_g83VHK4

From: Marco Peereboom
Date: Saturday, December 5, 2009 - 4:26 pm

You are a sphincter of epic proportions.


No this community isn't about helping beggars and other dogshit.  This
community is about developing code that doesn't suck.

Fuck off troll.

From: rhubbell
Date: Saturday, December 5, 2009 - 4:59 pm

On Sat, 5 Dec 2009 17:26:36 -0600


Jeez, go get some fresh air or something. And please just ignore my posts
if you care that much.

From: Michiel van Baak
Date: Saturday, December 5, 2009 - 7:02 pm

And please stop posting till you get a fucking clue.
-- 

Michiel van Baak
michiel@vanbaak.eu
http://michiel.vanbaak.eu
GnuPG key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x71C946BD

"Why is it drug addicts and computer aficionados are both called users?"

From: Jacob Meuser
Date: Saturday, December 5, 2009 - 7:07 pm

finally you say something that I can relate to.

-- 
jakemsr@sdf.lonestar.org
SDF Public Access UNIX System - http://sdf.lonestar.org

From: rhubbell
Date: Saturday, December 5, 2009 - 8:55 pm

On Sun, 6 Dec 2009 02:07:00 +0000

But couldn't resist, eh? (^:

From: Jacob Meuser
Date: Saturday, December 5, 2009 - 11:22 pm

no, it was a test to see if you could take your own advice.  since you
won't, I am now sure you're not worth paying attention to and are only
here to be a prick.

thanks for clarifying.

-- 
jakemsr@sdf.lonestar.org
SDF Public Access UNIX System - http://sdf.lonestar.org

From: Tomáš Bodžár
Date: Saturday, December 5, 2009 - 11:47 pm

You are missing whole point of philosophy of OpenBSD. Snippet from one
good book :

The OpenBSD community generally expects users to be advanced computer
users. They have
written extensive documentation about OpenBSD, and expect people to be
willing to read it.
They're not interested in coddling new UNIX users and will say so if
pressed. They don't object
to new UNIX users using OpenBSD, but do object to people asking them
for basic UNIX help
just because they happen to be running OpenBSD. If you're a new UNIX
user, they will not hold
your hand. They will not develop features just to please users.
OpenBSD exists to meet the needs
of the developers, and while others are welcome to ride along the
needs of the passengers do not
steer the project.





--
http://www.openbsd.org/lyrics.html

From: rhubbell
Date: Saturday, December 5, 2009 - 3:45 pm

On Sat, 5 Dec 2009 22:52:35 +0200

Not sure how care plays into this. A simple question that the folks here
would rather not answer but instead would rather meander about.

From: Johan Beisser
Date: Saturday, December 5, 2009 - 4:01 pm

Feeding the troll, sorry.


I gave you the file where GENERIC for all kernels is configured.

If you bothered to look, you'd have seen and figured it out for
yourself. You didn't bother. You want to be coddled and hand-fed
answers, and that's fine if you don't mind sticking with what's
supported.

Otherwise, teach yourself.

From: rhubbell
Date: Saturday, December 5, 2009 - 4:56 pm

On Sat, 5 Dec 2009 15:01:06 -0800


Apparently you don't care enough to even read the thread. But it's ok,
I don't care if you care or not.  But thanks at least for trying to help.

From: Henning Brauer
Date: Monday, December 7, 2009 - 1:39 am

all the code kernel side is under #ifdef INET6, so that is the knob.
it works, it has to work, because some install kernels are inet-only.

I don't bother. I run GENERIC or GENERIC.MP, period. using -inet6 in
the hostname files and blocking all inet6 shit on the firewalls is
good enough.


-- 
Henning Brauer, hb@bsws.de, henning@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting

From: Johan Beisser
Date: Saturday, December 5, 2009 - 1:57 pm

You could also do more digging around yourself.

http://www.openbsd.org/cgi-bin/cvsweb/src/sys/conf/GENERIC?rev=1.150

Look for INET6.

From: Allie Daneman
Date: Saturday, December 5, 2009 - 2:10 pm

man ifconfig...is a quick and easy way to disable inet6 on any 
interface. Beyond that I'm thinking sysctl, did you peruse around before 
posting ?


-- 

Allie

From: rhubbell
Date: Saturday, December 5, 2009 - 5:02 pm

On Sat, 05 Dec 2009 13:10:27 -0800

It's not that simple. Applications still try IPv6 even when it's disabled
in the kernel and there's no vestige of it for ifconfig to even find.
So the problem is that there are apps I need to rebuild but I presumed that
there might be a simple way to disable from a top-level makefile or the
like.

From: Michiel van Baak
Date: Saturday, December 5, 2009 - 7:07 pm

"there are apps" means you are not talking about your system.

Did you even bother to look at a tcpdump when you are running on a
kernel without ipv6 support? Is there any ipv6 traffic when running on a
kernel without ipv6 ?

You blame us for a lot of stuff while you did not do anything to show us
where the problem is.

Till you have more data, go read the manpages and find out yourself
mkay?

-- 

Michiel van Baak
michiel@vanbaak.eu
http://michiel.vanbaak.eu
GnuPG key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x71C946BD

"Why is it drug addicts and computer aficionados are both called users?"

From: rhubbell
Date: Saturday, December 5, 2009 - 8:53 pm

On Sun, 6 Dec 2009 03:07:03 +0100

Funny, no, not blaming anyone for anything. Never play blame game. What's
the point? But go ahead if you want.

The question seemed simple enough to me, if you can't give an answer, no
problem.

From: rhubbell
Date: Saturday, December 5, 2009 - 3:25 pm

On Sat, 5 Dec 2009 12:57:58 -0800

I'd say that applies to you, not me. (^:

From: Philip Guenther
Date: Saturday, December 5, 2009 - 3:59 pm

"Needs to be disabled" ...to accomplish what goal?  Saving of disk
space?  Elimination of code complexity?  Ignoring of IPv6 packets that
are received?  Something else?

Depending on what you're trying to accomplish, putting
  up -inet6


Sounds like you would prefer if the presence of IPv6 wasn't making the
code more complex.  If so, the answer is "no, it cannot be disabled in
that way."


Philip Guenther

From: rhubbell
Date: Saturday, December 5, 2009 - 5:16 pm

On Sat, 5 Dec 2009 14:59:53 -0800

I presumed that applications would be written so that if there's no
support for a protocol family in the kernel that the app would be smart


Thanks for the assist. To me it's simply I don't need IPv6, I don't use
IPv6. I don't want to see any errors from applications that want IPv6.
Why isn't IPX in the kernel and everywhere else? Or AppleTalk or .... 
Yes I know IPv6 is the "future". But I can wait. I've yet to see a good
answer of why it's on by default in a lot of places. Is it to shake it out
to find the issues? That's fine but to force it is not fine. It should be
opt-in not opt-out just like most everything.

From: Michiel van Baak
Date: Saturday, December 5, 2009 - 7:10 pm

give us some data.

If your system does not support ipv6, there will be no outgoing/incoming

You only have 1 year left according to most counters.
-- 

Michiel van Baak
michiel@vanbaak.eu
http://michiel.vanbaak.eu
GnuPG key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x71C946BD

"Why is it drug addicts and computer aficionados are both called users?"

From: Philip Guenther
Date: Sunday, December 6, 2009 - 1:29 am

So how have you done that in the applications that you've written?
Have you sent patches to those application authors, following what
you've done yourself?  You keep using that word "applications" without
actually saying *what* programs are involved.  Programs in the OpenBSD
base?  Programs from ports?  Other programs?  What error messages have
they generated?  Under what circumstances?  Where are the *DETAILS* of
your problem?

Ah.  It seems from the bulk of your messages that you're more
concerned with defending your issue than with actually resolving it.
My apologies for distracting you from your main concern.


Philip Guenther

From: Corey
Date: Sunday, December 6, 2009 - 12:52 pm

I'll don the Nomex here and say that rather than turning IPv6 "off", I 
just block it with pf.  I don't know if that is what the OP wants, but 
it is relatively simple to do (as opposed to twiddling things in the 
kernel) and it keeps me from having to worry about any unexpected 
consequences of the box receiving or transmitting IPv6 traffic, which I 
currently know so little about that I worry about it.

Corey

From: Todd T. Fries
Date: Sunday, December 6, 2009 - 4:15 pm

Penned by Corey on 20091206 13:52.42, we have:
| I'll don the Nomex here and say that rather than turning IPv6 "off",
| I just block it with pf.  I don't know if that is what the OP wants,
| but it is relatively simple to do (as opposed to twiddling things in
| the kernel) and it keeps me from having to worry about any
| unexpected consequences of the box receiving or transmitting IPv6
| traffic, which I currently know so little about that I worry about
| it.
| 
| Corey

Between pf, 'ifconfig em0 -inet6' and 'echo family inet4 >> /etc/resolv.conf'
you should have about all the anti v6 knobs a budding newbie should need.

Me, I use IPv6 a lot.  You, obviously do not.

To each their own.
-- 
Todd Fries .. todd@fries.net

 _____________________________________________
|                                             \  1.636.410.0632 (voice)
| Free Daemon Consulting, LLC                 \  1.405.227.9094 (voice)
| http://FreeDaemonConsulting.com             \  1.866.792.3418 (FAX)
| 2525 NW Expy #525, Oklahoma City, OK 73112  \  sip:freedaemon@ekiga.net
| "..in support of free software solutions."  \  sip:4052279094@ekiga.net
 \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
                                                 
              37E7 D3EB 74D0 8D66 A68D  B866 0326 204E 3F42 004A
                        http://todd.fries.net/pgp.txt

From: Alexander Bochmann
Date: Tuesday, December 8, 2009 - 12:58 pm

Hi,

...on Sun, Dec 06, 2009 at 05:15:14PM -0600, Todd T. Fries wrote:

 > Between pf, 'ifconfig em0 -inet6' and 'echo family inet4 >> /etc/resolv.conf'
 > you should have about all the anti v6 knobs a budding newbie should need.

Thanks for putting all the required info into one place.

Alex.

From: Janne Johansson
Date: Monday, December 7, 2009 - 1:17 am

You dont need tn3270 either, but strangely enough I never see "how do I 
remove all files that give OpenBSD support for talking tn3270" from the 
IPv6-remover crowds. There is space to be saved there, for sure.

From: russell
Date: Wednesday, December 9, 2009 - 12:13 am

Hey! I use tn3270.
Well actually c3270 as it is a bit saner when remapping keys.

But I was very presently surprised to find tn3270 in base. Saved my day 
once.

And thread hijack. As far as I can tell wscons does not send/set 
Shift+Fn keys.

was sort of looking for them as I like to map that to PF11-PF22

It was quite the adventure trying to figure out how(and in what form) a 
key gets to the app.
again a sort of nonquestion.
I think it is
key
   wscons set this via wsconsctl
     termcap/terminfo might be able to set it here but termcap scares me
       tn3270/c3270 hah yet another keymap

so minimum 3 different keymaps add X to the mix and it adds it's own 
freakish system into the mix.

From: Nick Holland
Date: Sunday, December 6, 2009 - 8:37 pm

Previous thread: HP Mini Touchpad Broken in Recent Snapshots by Brad Tilley on Saturday, December 5, 2009 - 9:19 am. (5 messages)

Next thread: building sbin/route on -current? by James Hartley on Saturday, December 5, 2009 - 12:55 pm. (7 messages)