22 Aug
2010
22 Aug
'10
1:09 p.m.
Hi Keith,
On Sun, Aug 22, 2010 at 01:43:41PM +0100, Keith Williams wrote:
Then I realised that I hadn't blocked ipv6 on that
vps so have set
up a ip6tables rule dropping all connections, should be the end of
it. It probably explains why I have not noticed such things on my
other vps, as ipv6 has been blocked on there from when I first
took it on
But are they actual IPv6 addresses? If they contain "ffff" as the
6th quad [1] then they're IPv4 addresses mapped into IPv6, probably
because your web server has opened a socket that can accept both IPv6
and IPv4 connections. I think you'd have to actually unload the IPv6
module for this to not happen.
My example earlier was from a host that only has an IPv4 address
configured - must fix that!
Cheers,
Andy
[1] I'm unsure if "quad" is the correct terminology for the four
hexadecimal nybbles in each colon-delimited section; RIPE's IPv6
trainers that I spoke to on Friday were also not sure.
--
http://bitfolk.com/ -- No-nonsense VPS hosting