Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
public:my_own_ipv6_tips_for_servers [2010/01/04 23:31] – created Nicopublic:my_own_ipv6_tips_for_servers [2024/03/30 22:22] (current) – cosmetic fixes Nico
Line 5: Line 5:
 ===== SSH ===== ===== SSH =====
 add to /etc/ssh/sshd_config: add to /etc/ssh/sshd_config:
 +
 <code> <code>
 ListenAddress :: ListenAddress ::
Line 18: Line 19:
 ===== vsftpd ===== ===== vsftpd =====
 you'll have to run to different instances of vsftpd, one for ipv4, and one for ipv6. you'll have to run to different instances of vsftpd, one for ipv4, and one for ipv6.
- * /etc/vsftpd.conf:+  * /etc/vsftpd.conf:
 <code> <code>
 listen=YES listen=YES
 </code> </code>
- * /etc/vsftpd_ipv6.conf:+  * /etc/vsftpd_ipv6.conf: 
 <code> <code>
 +listen=NO
 listen_ipv6=YES listen_ipv6=YES
 </code> </code>
Line 29: Line 32:
 Then run each instance separately: Then run each instance separately:
 <code> <code>
-# /path/to/vsftpd /usr/local/etc/vsftpd.conf +# /path/to/vsftpd /etc/vsftpd.conf 
-# /path/to/vsftpd /usr/local/etc/vsftpd_ipv6.conf+# /path/to/vsftpd /etc/vsftpd_ipv6.conf
 </code> </code>
 +
 ===== qmail ===== ===== qmail =====
-compile ucspi-tcp (a.k.a. //tcpserver//) with ipv6 support.+compile [[http://cr.yp.to/ucspi-tcp.html|ucspi-tcp]] (a.k.a. //tcpserver//) with ipv6 support. 
 ===== dovecot ===== ===== dovecot =====
 for each "protocol" section in /etc/dovecot.conf, insert the following lines: for each "protocol" section in /etc/dovecot.conf, insert the following lines:
Line 42: Line 47:
  
 of course, ssl_listen have to be used only if you use SSL version of the protocols (that is, imaps or pop3s). of course, ssl_listen have to be used only if you use SSL version of the protocols (that is, imaps or pop3s).
 +
 +===== netfilter =====
 +remember that ipv6 needs icmp to work, so you have to enable it:
 +<code>
 +# ip6tables -A INPUT -p icmpv6 -j ACCEPT
 +</code>
 +
 +===== Packet Filter =====
 +remember that ipv6 needs icmp to work, so you have to enable it. add this to /etc/pf.conf:
 +<code>
 +pass proto ipv6-icmp all    
 +</code>
 +
 +===== MySQL =====
 +as stated [[http://bugs.mysql.com/bug.php?id=49024|here]], you need at least MySQL v5.5.x for ipv6 to work.