[Nottingham] Is it theft to be live alive? (Was: Media Centre Linux distro?)

Alex Holt alex.holt at ntlworld.com
Thu May 10 14:59:21 UTC 2012


On 10/05/2012 09:36, Martin wrote:
> On 10/05/12 08:19, Alex Holt wrote:
>> That's not typically true. The usual case is that RFC 4941 Privacy
>> Extension addresses are turned on, and each computer generates a new
>> ephemeral address every 24 hours to use for outgoing connections. Since
>> the address is random there's no information in it to identify the
>> specific computer.
>>
>> (Given the list I'm posting this to, I should mention the non-typical
>> case: privacy extensions are enabled by default on Windows but not on
>> Linux. Enable them by setting net.ipv6.conf.<interface>.use_tempaddr=2)
> 
> That's an interesting aside. Do you mind if I post that little nugget up
> on the NLUG website?
> 
> Cheers,
> Martin

Sure. It looks like the right generic way to go about setting it is
  net.ipv6.conf.default.use_tempaddr = 2
  net.ipv6.conf.eth0.use_tempaddr = 2
in /etc/sysctl.conf. (The first line covers interfaces created after
sysctl.conf is read, and the second is in case eth0 is created before
it's read.)

Debian users can enable for specific interfaces with
  pre-up sysctl net.ipv6.conf.$IFACE.use_tempaddr=2
in the respective block in /etc/network/interfaces instead.

(And don't be tempted by net.ipv6.conf.all.use_tempaddr. You might think
it would apply to all interfaces, but it actually applies to none of
them. The .all. tree is utterly confusing at times...)



More information about the Nottingham mailing list