LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Debian
User Name
Password
Debian This forum is for the discussion of Debian Linux.

Notices

Reply
 
LinkBack Search this Thread
Old 06-01-2006, 10:26 PM   #1
felosi
LQ Newbie
 
Registered: Jan 2006
Location: USA
Distribution: CentOS for servers and Ubuntu for desktop
Posts: 25

Rep: Reputation: 15
disabling ipv6


I have a debian server and when I do netstat it does not give complete ip address due to the tcp6. This is preventing any dos protection script or apf from blocking malicious ips because it does not get the entire ip. Here is an example
Code:
tcp6       0      0 ::ffff:65.23.156.190:80 ::ffff:67.136.33.:60256 TIME_WAIT  -
tcp6       0      0 ::ffff:65.23.156.190:80 ::ffff:67.136.33.:60257 TIME_WAIT  -
tcp6       0   1584 ::ffff:65.23.156.190:22 ::ffff:67.136.33.:60194 ESTABLISHED4493/2
tcp6       0      0 ::ffff:65.23.156.190:80 ::ffff:69.14.5.10:62328 TIME_WAIT  -
tcp6       0      0 ::ffff:65.23.156.190:80 ::ffff:67.136.33.:60250 TIME_WAIT  -
tcp6       0      0 ::ffff:65.23.156.190:80 ::ffff:67.136.33.:60251 TIME_WAIT  -
tcp6       0      0 ::ffff:65.23.156.190:80 ::ffff:67.136.33.:60252 TIME_WAIT  -
tcp6       0      0 ::ffff:65.23.156.190:80 ::ffff:67.136.33.:60253 TIME_WAIT  -
tcp6       0      0 ::ffff:65.23.156.190:80 ::ffff:67.136.33.:60254 TIME_WAIT  -
tcp6       0      0 ::ffff:65.23.156.190:80 ::ffff:67.136.33.:60255 TIME_WAIT  -
I found where you can edit modprode aliases and disable it but then I found where you cant. All my connections to ssh and port 80 are tcp6. If I disable this and reboot will I be able to connect to my box? Will it pick up the new protocol? What can I do?
Thanks a lot
 
Old 06-02-2006, 04:18 PM   #2
macemoneta
Senior Member
 
Registered: Jan 2005
Location: Manalapan, NJ
Distribution: Fedora x86 and x86_64, Debian PPC and ARM, Android
Posts: 4,593
Blog Entries: 2

Rep: Reputation: 326Reputation: 326Reputation: 326Reputation: 326
Have you tried with the '-v' option?

Quote:
-v Be verbose. Avoids truncation of long addresses.
 
Old 06-02-2006, 11:21 PM   #3
felosi
LQ Newbie
 
Registered: Jan 2006
Location: USA
Distribution: CentOS for servers and Ubuntu for desktop
Posts: 25

Original Poster
Rep: Reputation: 15
well that displays the hostname but not the ip. I also got these errors when I did that:
Code:
netstat: no support for `AF IPX' on this system.
netstat: no support for `AF AX25' on this system.
netstat: no support for `AF X25' on this system.
netstat: no support for `AF NETROM' on this system.
 
Old 06-02-2006, 11:31 PM   #4
macemoneta
Senior Member
 
Registered: Jan 2005
Location: Manalapan, NJ
Distribution: Fedora x86 and x86_64, Debian PPC and ARM, Android
Posts: 4,593
Blog Entries: 2

Rep: Reputation: 326Reputation: 326Reputation: 326Reputation: 326
From the 'man netstat' documentation:

Quote:
--numeric , -n
Show numerical addresses instead of trying to determine symbolic host,
port or user names.
Also, if you would like to suppress errors, you can route stderr to /dev/null:

netstat -v -n 2>/dev/null
 
Old 06-03-2006, 11:46 PM   #5
felosi
LQ Newbie
 
Registered: Jan 2006
Location: USA
Distribution: CentOS for servers and Ubuntu for desktop
Posts: 25

Original Poster
Rep: Reputation: 15
yeah I know about -n it is not displaying full ips on any because of the ipv6
 
Old 06-04-2006, 12:11 AM   #6
macemoneta
Senior Member
 
Registered: Jan 2005
Location: Manalapan, NJ
Distribution: Fedora x86 and x86_64, Debian PPC and ARM, Android
Posts: 4,593
Blog Entries: 2

Rep: Reputation: 326Reputation: 326Reputation: 326Reputation: 326
If you're saying that entering 'netstat -v -n 2>/dev/null' still truncates the IP addresses, then open a bug with the packager of the netstat you are using; they appear to have missed a patch.
 
Old 06-05-2006, 10:07 PM   #7
felosi
LQ Newbie
 
Registered: Jan 2006
Location: USA
Distribution: CentOS for servers and Ubuntu for desktop
Posts: 25

Original Poster
Rep: Reputation: 15
thanks for your help. Im currently running debian sarge with plesk so it is the one that is with that. Do you think it would screw up anything or mess with the plesk if I was to upgrade it to testing? Or do you know of where I can get a replacement netstat? I wish debian would hurry up with etch, sarge is getting outdated.
Thanks Again
 
Old 06-05-2006, 10:46 PM   #8
macemoneta
Senior Member
 
Registered: Jan 2005
Location: Manalapan, NJ
Distribution: Fedora x86 and x86_64, Debian PPC and ARM, Android
Posts: 4,593
Blog Entries: 2

Rep: Reputation: 326Reputation: 326Reputation: 326Reputation: 326
Well, for debian, you could download the latest version of net-tools from testing or unstable.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Disabling ipv6 on SuSE 10.0 VIR3NT Suse/Novell 3 05-14-2009 06:08 AM
ipv6 vito_huang Linux - Networking 1 10-30-2004 02:28 AM
ipv6 (help) moonspell Linux - Networking 0 03-09-2004 12:47 PM
ipv6 fontoura Linux - General 0 11-05-2003 05:04 AM
IPv6 Russman67 Linux - Networking 2 09-02-2002 01:32 AM


All times are GMT -5. The time now is 05:10 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration