[7.903][QUESTION][ANSWERED] ip6 disable

Hello Friends !

i have disable ipv6p on asg still there are many ports open with/for ipv6p can u please tell me that how it suppose to work

COMMAND    PID     USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
pluto     6053     root   21u  IPv6  75229      0t0  UDP ip6-localhost:isakmp
postgres  7626 postgres    4u  IPv6  93601      0t0  TCP *[:P]ostgresql (LISTEN)
named     8024     root   20u  IPv6  96227      0t0  TCP *[:D]omain (LISTEN)
named     8024     root  512u  IPv6  96226      0t0  UDP *[:D]omain
named     8024     root  519u  IPv6  96240      0t0  UDP *:57794
snmpd     8052     root    9u  IPv6  98684      0t0  UDP *:snmp
sshd      8178     root    4u  IPv6 103485      0t0  TCP *:22222 (LISTEN)
httpd     8261     root    5u  IPv6 103713      0t0  TCP *:3840 (LISTEN)
httpd     8261     root    7u  IPv6 103718      0t0  TCP *:webadmin (LISTEN)
httpd     8264   wwwrun    5u  IPv6 103713      0t0  TCP *:3840 (LISTEN)
httpd     8264   wwwrun    7u  IPv6 103718      0t0  TCP *:webadmin (LISTEN)
httpd     8265   wwwrun    5u  IPv6 103713      0t0  TCP *:3840 (LISTEN)
httpd     8265   wwwrun    7u  IPv6 103718      0t0  TCP *:webadmin (LISTEN)
exim      8573   chroot    3u  IPv6 143112      0t0  TCP *:smtp (LISTEN)
exim      8573   chroot    5u  IPv6 143114      0t0  TCP *:smtps (LISTEN)
exim      8573   chroot    7u  IPv6 143116      0t0  TCP *:submission (LISTEN)
httpproxy 8584   chroot   10u  IPv6 138822      0t0  TCP *:http-alt (LISTEN)
httpproxy 8584   chroot   12u  IPv6 138826      0t0  TCP *:58080 (LISTEN)
ntpd      8825     root   17u  IPv6 139580      0t0  UDP *:ntp
ntpd      8825     root   23u  IPv6 139591      0t0  UDP ip6-localhost:ntp
httpd     9182   wwwrun    5u  IPv6 103713      0t0  TCP *:3840 (LISTEN)
httpd     9182   wwwrun    7u  IPv6 103718      0t0  TCP *:webadmin (LISTEN)

i can see some entry's in pf also, for ipv6

i am running asg on esxi 4.0.1
or is it bug
thanks

0 Astaro Beta Bot over 15 years ago

Astaro Beta Report
--------------------------------
Version: 7.903
Type: QUESTION
State: ANSWERED
Reporter: utm_kid
Contributor: 
MantisID: 
Target version: 
Fixed in version: 
--------------------------------

0 da_merlin over 15 years ago

Nothing to worry about, there are not IPv6 addresses set except for loopback ::1
Some programs open one socket for IPv4 AND IPv6. Because there are no IPv6
addresses set, there is no way to access the ASG via IPv6 if IPv6 is disabled.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 utm_kid over 15 years ago in reply to da_merlin

what is port 3653 i have tooo many entryies in my pf log

10:41:54 Default DROP TCP
192.168.2.189 : 2961
→
116.197.146.63 : 3653

[SYN] len=48 ttl=127 tos=0x00 srcmac=0:24:e8:a1:fa:aa dstmac=0:c:29:9a:46:66

i guess it is used by ipv6

thanks
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 christianlouis over 15 years ago

Hi utm_kid,

Google: "TCP 3653".

Let me google that for you

I've thrown in "IANA" since this is the internet authority that assigns well known ports.

Give yourself 10 Minutes' worth time of googling this by yourself, THEN come back and ask questions. (How To Ask Questions The Smart Way is a good tutorial how to ask smart questions that save everybody's time).

So, a) what have you found out when googling by yourself?
b) What are your questions based on this?

(Example for a good question:

"I see a lot of outgoing connections from my network to TCP Port 3653. I have googled TCP Port 3653 and from the google results I've seen that it is used for something related to IPv6. It says it is related to a "Tunnel Setup Protocol". I've googled "Tunnel Setup Protocol and understood that it is used for tunneling IPv6 in IPv4 but I would like to know who uses it and who owns the IP address 116.197.146.63")

Now it's your turn!

Christian
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 da_merlin over 15 years ago

Who is 192.168.2.189, the ASG or a LAN client?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 utm_kid over 15 years ago in reply to da_merlin

lan client
asg is 192.168.2.100
isp dns 202.54.10.2

i can see after some browsing request there is default drop with publicip:3653
i don't mind to do a remote session or u can take control

thx
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 kbr over 15 years ago in reply to utm_kid

what is port 3653 i have tooo many entryies in my pf log

As we told you during the closed beta period, this is the gogo6 client software on the windows machine. think back, maybe you remember. it's only been a few weeks.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 utm_kid over 15 years ago in reply to kbr

ok !

i have uninstalled that client but isnt it strange even that client is not running there was traffic from that client

anyway thanks
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel