Skip to content

Commit

Permalink
add ipv6 disable
Browse files Browse the repository at this point in the history
  • Loading branch information
@kenmoini
kenmoini committed May 21, 2024
1 parent 9908d6f commit edaae1e
Showing 1 changed file with 6 additions and 0 deletions.
6 changes: 6 additions & 0 deletions site/content/en/post/2024/02/plex-n-pals.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -197,6 +197,12 @@ Executing the last `curl` command, you should see the IP of your OpenVPN Server
However, if the VPN connection goes down, outbound traffic can still traverse the LAN out to the public Internet. Ideally it would only maintain a connection to the Internet through the VPN tunnel - this is where a "VPN Killswitch" comes into play:

```bash
# Disable IPv6 to prevent leakage
echo "net.ipv6.conf.all.disable_ipv6=1" > /etc/sysctl.d/99-disable-ipv6.conf
echo "net.ipv6.conf.default.disable_ipv6=1" >> /etc/sysctl.d/99-disable-ipv6.conf
echo "net.ipv6.conf.lo.disable_ipv6=1" >> /etc/sysctl.d/99-disable-ipv6.conf
sysctl -p /etc/sysctl.d/99-disable-ipv6.conf

# Enable FirewallD
systemctl enable --now firewalld

Expand Down

0 comments on commit edaae1e

Please sign in to comment.