[nubinetwork]

Why firewall it when you can straight up turn it off?

net.ipv6.conf.all.disable_ipv6 = 1 net.ipv6.conf.default.disable_ipv6 = 1

[brobinson]

ipv6.disable=1 in kernel boot flags so the interfaces don't even show up

[nubinetwork]

I do both of these on Ubuntu just in case one of them doesn't work, too many apt hooks constantly changing the kernel...

[nathants]

disable via kconfig so it’s not even in kernel.

[nubinetwork]

I do this on Gentoo but nobody likes to run Gentoo in production.