19:14:24 <jistone> #startmeeting
19:14:24 <zodbot> Meeting started Sat Dec  5 19:14:24 2009 UTC.  The chair is jistone. Information about MeetBot at http://wiki.debian.org/MeetBot.
19:14:24 <zodbot> Useful Commands: #action #agreed #halp #info #idea #link #topic.
19:14:33 <ianweller> jistone: thanks!
19:14:51 <jistone> we're starting the logging late here...
19:15:21 <jistone> have covered a few use cases so far, like static ipv6 routing behind ipv4 NAT
19:15:41 <jistone> currently talking about radvd for advertising your ipv6 addresses
19:16:07 <jistone> NetworkManager has ipv6 support in f12
19:16:42 <jistone> fedoraproject.org and mirrormanager are ipv6-enabled
19:17:50 <jistone> ipv6 has a prefix that you get from your isp or a tunnel broker (like SixXs)
19:20:01 <jistone> setting up a 4-to-6 tunnel on F11:
19:20:12 <jistone> cd /etc/sysconfig/network-scripts/
19:21:02 <jistone> vim ifcfg-eth0
19:21:20 <jistone> (add)
19:21:29 <jistone> IPV6INIT=yes
19:21:43 <jistone> IPV6TO4=yes
19:21:52 <jistone> IPV6ADDR="..."
19:22:47 <jistone> in ./network, add IPV6_DEFAULTDEV=tun6to4
19:24:03 <jistone> beware that all of the hosts in your subnet will be exposed (for better or worse)
19:25:49 <jistone> 6to4 addresses always have a 2002: prefix
19:28:23 <jistone> to directly access a v6 host, you must have a v6 address on your client
19:28:54 <jistone> sometimes a v4 border host may route services to internal v6 hosts
19:30:47 <jistone> some more benefits: better QoS, mobile ipv6 as you roam networks
19:30:47 <ricky> Hey, just a note, we are having ipv6 issues on fp.o, so we had to disable that for now :-(
19:32:14 <jistone> SixXS FAQ as a "Cool IPv6 Stuff" page
19:32:55 * warthog9 confirms similar "issues" investigating ipv6 on/for korg
19:36:39 <jistone> if you use ipv6, you can get a Dancing KAME: http://www.kame.net.ipv4.sixxs.org/
19:39:27 <ricky> s/we/people at FUDCon/ :-)
19:40:34 <jistone> ricky, I think we were recommended to disable ipv6 here for that reason
19:46:36 <jistone> with ipv6, you may want a stateful firewall to serve a similar purpose that NAT does to help security
19:51:36 <jistone> if you're accepting ipv6 routing advertisements, someone may be able to easily snoop your connections.  can be disabled in-kernel with:
19:52:16 <jistone> echo 0 >/proc/sys/net/ipv6/conf/all/accept_ra
19:55:38 <jistone> #endmeeting