From owner-freebsd-questions@freebsd.org Tue Jun 18 07:55:34 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2DAD915D28D3; Tue, 18 Jun 2019 07:55:34 +0000 (UTC) (envelope-from hausen@punkt.de) Received: from kagate.punkt.de (kagate.punkt.de [217.29.33.131]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id CF77496B86; Tue, 18 Jun 2019 07:55:27 +0000 (UTC) (envelope-from hausen@punkt.de) Received: from hugo10.ka.punkt.de (hugo10.ka.punkt.de [217.29.44.10]) by gate2.intern.punkt.de with ESMTP id x5I7t63G031951; Tue, 18 Jun 2019 09:55:17 +0200 (CEST) Received: from [217.29.44.36] ([217.29.44.36]) by hugo10.ka.punkt.de (8.14.2/8.14.2) with ESMTP id x5I7srkb056878; Tue, 18 Jun 2019 09:54:53 +0200 (CEST) (envelope-from hausen@punkt.de) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Re: Eliminating IPv6 (?) From: "Patrick M. Hausen" In-Reply-To: <18748.1560843874@segfault.tristatelogic.com> Date: Tue, 18 Jun 2019 09:54:53 +0200 Cc: freebsd-net@freebsd.org, freebsd-questions@freebsd.org Content-Transfer-Encoding: quoted-printable Message-Id: <9AF5DF39-9B81-4270-B25C-D089C971E924@punkt.de> References: <18748.1560843874@segfault.tristatelogic.com> To: "Ronald F. Guilmette" X-Mailer: Apple Mail (2.3445.104.11) X-Rspamd-Queue-Id: CF77496B86 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of hausen@punkt.de designates 217.29.33.131 as permitted sender) smtp.mailfrom=hausen@punkt.de X-Spamd-Result: default: False [-2.21 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.97)[-0.967,0]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; R_SPF_ALLOW(-0.20)[+ip4:217.29.32.0/20]; MV_CASE(0.50)[]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; DMARC_NA(0.00)[punkt.de]; TO_DN_SOME(0.00)[]; NEURAL_HAM_LONG(-1.00)[-0.998,0]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MX_GOOD(-0.01)[mailin.pluspunkthosting.de,mailin.pluspunkthosting.de]; NEURAL_HAM_SHORT(-0.23)[-0.228,0]; RCVD_IN_DNSWL_NONE(0.00)[131.33.29.217.list.dnswl.org : 127.0.10.0]; IP_SCORE(-0.21)[ipnet: 217.29.32.0/20(-0.57), asn: 16188(-0.46), country: DE(-0.01)]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:16188, ipnet:217.29.32.0/20, country:DE]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 07:55:34 -0000 Hi! > Am 18.06.2019 um 09:44 schrieb Ronald F. Guilmette = : > As I have already learned, the /etc/rc.firewall script also assumes = both the > presence of, and the desirability of IPv6 support. And unless one = edits that > file manually... which I have been effectively forced to do... there = is no way > to get it to simply NOT create and install multiple IPv6-related ipfw = rules, > EVEN THOUGH in my particular situation... which is still the most = common case... > those extra and entirely superfluous IPv6 ipfw filtering rules are = serving > no earthly purpose whatsoever and are only cluttering up my ipfw rule = set, > thus pointlessly making it harder for me to grok and maintain them = all. Instead of messing with the system provided file you could create a new one with only your own desired rules and then set this rc.conf variable: firewall_script=3D"/etc/rc.firewall" # Which script to run to = set up the firewall As for the rest of your request, yes, I find it unreasonably in 2019 but let=E2=80=99s not get into a fight about that. IPv6 is here to stay. If = you boot any Mac or Windows 10 desktop, IPv6 will be active and even necessary for service autodiscovery and similar things to work. Kind regards Patrick --=20 punkt.de GmbH Internet - Dienstleistungen - Beratung Kaiserallee 13a Tel.: 0721 9109-0 Fax: -100 76133 Karlsruhe info@punkt.de http://punkt.de AG Mannheim 108285 Gf: Juergen Egeling