01-29-2020
I believe these 127.0.0.1 loopbacks are not "true network connections" and so IPV6 traffic will not pass since you blocked IPV6 networking.
The title of your post is:
Quote:
Webscrab proxy creates loads of TCP6 connections despite IPV6 being down
These 127.0.0.1 internal loopbacks are not "true connections" per se.
Did you actually try to pass IPV6 traffic thought that host? If you did, I would be surprised if any IPV6 traffic would pass since you have already disabled IPV6 networking via
"sysctl -w net.ipv6.conf.all.disable_ipv6=1".
You might want to check to make sure when you installed your proxy server that it did not unintentionally enable your intended block / disabled setup.
PS: You should use CODE tags when you post and insure your posts are well formatted and easy for everyone to read.
9 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
I've been asked to get a breakdown of what is consuming CPU time on our server over an extended period ?
Have been asked about the CPU load on our server and I need to be able to go back to my boss and indicate what % is consumed by what process (or group of processes). I.e. 15% is database... (2 Replies)
Discussion started by: Cameron
2 Replies
2. IP Networking
Hi,
I am involved in a project on Debian. One of my requirement is to route an IP packet in my application to a proxy server and receive the reply from the proxy server as an IP packet. My application handles data at the IP frame level. My application creates an IP packet(with all the necessary... (0 Replies)
Discussion started by: Rajesh_BK
0 Replies
3. UNIX for Dummies Questions & Answers
Hi All,
I've got file1 like this:
aaa bbb ccc
ddd eee fff
ggg hhh kkk
ppp mmm nnn
and file 2 like this:
aaa qqq www
ddd fff ggg
ggg sss zzz
ppp vvv yyy
and file 3 like this:
aaa
ggg
ppp
I need to match the first column of file3 and file1, then add the rest of the file 1 to... (3 Replies)
Discussion started by: zajtat
3 Replies
4. UNIX for Advanced & Expert Users
Hi,
I was Googling to get info "How OS loads process into its memory to execute?" i mean when i execute ./<exename> , How OS exectes it?
It will be better if i tell my intention,
In my $LOGNAME saveral process are running, among all of these two process are my target process. Basically I... (1 Reply)
Discussion started by: ashokd001
1 Replies
5. Debian
Hey, I recently installed Debian on a desktop PC but when it starts I can't see anything (the monitor say no signal). I don't have any idea or even a way to figure out what going on here since I can't see anything at all not even the console. Is there something that I missed in the install, or is... (22 Replies)
Discussion started by: neur0n
22 Replies
6. UNIX for Dummies Questions & Answers
We are deploying an app to our students that is running as a daemon. It keeps them from using certain software. The problem is that when we initially deploy it we don't want to require a restart. So we decided to use launchctl to load the daemon manually. When we do it this way, though, the... (4 Replies)
Discussion started by: nextyoyoma
4 Replies
7. IP Networking
I need to configure a proxy on my local machine to use an upstream proxy (installed on another machine). The upstream proxy requires Digest/NTLM authorization. I want the local proxy to deal with the upstream proxy's authorization details and provides authorization free access to users that connect... (0 Replies)
Discussion started by: Russel
0 Replies
8. AIX
Hello,
Is there any way to su another user and loading its profile with an argument.
For example I am user1 and I want to start user2
user2 .profile is interactive asking user to pass some values
I want to automate a process by switching user and if I pass an argument the interactive... (4 Replies)
Discussion started by: geodimo
4 Replies
9. UNIX for Dummies Questions & Answers
Hi,
I have created a bonding bond1 interface with 6 Eth , mode=4. Recently i have changed my old ipv6 to new one and tried to restart as well as reload network service. Post which i can see old as well as changed ipv6 in ifconfig command output. Below are few files and command output for your... (1 Reply)
Discussion started by: omkar.jadhav
1 Replies
LEARN ABOUT DEBIAN
shorewall6-tcfilters
SHOREWALL6-TCFILTER(5) [FIXME: manual] SHOREWALL6-TCFILTER(5)
NAME
tcfilters - shorewall6 u32 classifier rules file
SYNOPSIS
/etc/shorewall6/tcfilters
DESCRIPTION
Entries in this file cause packets to be classified for traffic shaping.
Beginning with Shorewall 4.4.15, the file may contain entries for both IPv4 and IPv6. By default, all rules apply to IPv6 but that can be
changed by inserting a line as follows:
IPV4
Following entries apply to IPv4.
IPV6
Following entries apply to IPv6
ALL
Following entries apply to both IPv4 and IPv6. Each entry is processed twice; once for IPv4 and once for IPv6.
The columns in the file are as follows (where the column name is followed by a different name in parentheses, the different name is used in
the alternate specification syntax).
CLASS - interface:class
The name or number of an interface defined in shorewall6-tcdevices[1](5) followed by a class number defined for that interface in
shorewall6-tcclasses[2](5).
SOURCE - {-|address}
Source of the packet. May be a host or network address. DNS names are not allowed.
DEST - {-|address}}
Destination of the packet. May be a host or network address. DNS names are not allowed.
PROTO - {-|protocol-number|protocol-name|all}
Protocol.
DEST PORT (dport) - [-|port-name-or-number]
Optional destination Ports. A Port name (from services(5)) or a port number; if the protocol is icmp, this column is interpreted as the
destination icmp-type(s).
SOURCE PORT (sport) - [-|port-name-or-number]
Optional source port.
TOS - [-|tos]
Optional - specifies the value of the TOS field. The tos value can be any of the following:
o tos-minimize-delay
o tos-maximuze-throughput
o tos-maximize-reliability
o tos-minimize-cost
o tos-normal-service
o hex-number
o hex-number/hex-number
The hex-numbers must be exactly two digits (e.g., 0x04)x.
LENGTH - [-|number]
Optional. Must be a power of 2 between 32 and 8192 inclusive. Packets with a total length that is strictly less than the specified
number will match the rule.
EXAMPLE
Example 1:
Place all 'ping' traffic on interface 1 in class 10. Note that ALL cannot be used because IPv4 ICMP and IPv6 ICMP are two different
protocols.
#CLASS SOURCE DEST PROTO DEST
# PORT
IPV4
1:10 0.0.0.0/0 0.0.0.0/0 icmp echo-request
1:10 0.0.0.0/0 0.0.0.0/0 icmp echo-reply
IPV6
1:10 ::/0 ::/0 icmp6 echo-request
1:10 ::/0 ::/0 icmp6 echo-reply
FILES
/etc/shorewall6/tcfilters
SEE ALSO
http://shorewall.net/traffic_shaping.htm
http://shorewall.net/MultiISP.html
http://shorewall.net/PacketMarking.html
NOTES
1. shorewall6-tcdevices
http://www.shorewall.net/manpages6/shorewall6-tcdevices.html
2. shorewall6-tcclasses
http://www.shorewall.net/manpages6/shorewall6-tcclasses.html
[FIXME: source] 06/28/2012 SHOREWALL6-TCFILTER(5)