LFD cannot download some blockslists when ipv6 is disabled.

Post Reply
marcele
Junior Member
Posts: 215
Joined: 17 Sep 2007, 17:02

LFD cannot download some blockslists when ipv6 is disabled.

Post by marcele »

When ipv6 is disabled by Anaconda then we are seeing this in the LFD logs (Note that IPv6 is disabled in the csf.conf via IPV6 = "0");

Code: Select all

Unable to retrieve blocklist MAXMIND - Unable to download: Can't connect to www.maxmind.com:443 (socket: Address family not supported by protocol)

Code: Select all

[root@server modprobe.d]# cat /etc/modprobe.d/ipv6.conf 
# Anaconda disabling ipv6
options ipv6 disable=1

Code: Select all

[root@server]# cat /etc/redhat-release 
CentOS release 6.8 (Final)
ForumAdmin
Moderator
Posts: 1524
Joined: 01 Oct 2008, 09:24

Re: LFD cannot download some blockslists when ipv6 is disabled.

Post by ForumAdmin »

You probably need to put the following into /etc/sysctl.conf:

Code: Select all

net.ipv6.conf.all.disable_ipv6 = 1
Then run:

Code: Select all

sysctl -p
That should completely disable IPv6.
marcele
Junior Member
Posts: 215
Joined: 17 Sep 2007, 17:02

Re: LFD cannot download some blockslists when ipv6 is disabled.

Post by marcele »

Still doesn't work I'm afraid. I've linked the problem to pastbin as posting it to the forum triggers a mod_security rule.

http://pastebin.com/pEZL5iHy
ForumAdmin
Moderator
Posts: 1524
Joined: 01 Oct 2008, 09:24

Re: LFD cannot download some blockslists when ipv6 is disabled.

Post by ForumAdmin »

I don't see from the details that you posted why you think it is an IPv6 networking issue. The error seems to be saying that the LWP perl module is unable to connect to https://www.maxmind.com on port 443 outgoing.

This is not an issue we are seeing anywhere else and is controlled by the LWP perl module, so there is little else I can suggest as the errors seem to indicate a networking issue from the server.
marcele
Junior Member
Posts: 215
Joined: 17 Sep 2007, 17:02

Re: LFD cannot download some blockslists when ipv6 is disabled.

Post by marcele »

You are probably right. I'll dig into this further to try and find out what the issue is. Thanks again!
Post Reply