Disabling IPv6 on a Mac

Reducing the attack surface by disallowing network access via IPv6

Teri Radichel
Cloud Security
Published in
5 min readJun 23, 2020

--

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

🔒 Related Stories: OS and IoT Security | Network Security | Apple Mac Security

💻 Free Content on Jobs in Cybersecurity | ✉️ Sign up for the Email List

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

It’s always a good idea to disable things you aren’t using and don’t need. I wrote about reducing the attack surface by limiting the third-party code you download dynamically into your production environment in my last post. Any time you turn off or eliminate something an attacker might use to attack your system, you make their job just a bit harder.

Note: Every time I write about IPV6 I get flamed by a bunch of people who are apparently very passionate about IPV6. I explain further why I use IPV4 in this blog post and when IPV6 is a good design choice.

This post is a very high-level explanation of IPv6, how to turn off on a Mac, and why you might want to do that. There’s nothing wrong with IPv6 if you need to use it and know how to secure it. But as with anything you don’t need…

--

--

Teri Radichel
Cloud Security

CEO 2nd Sight Lab | Penetration Testing & Assessments | AWS Hero | Masters of Infosec & Software Engineering | GSE 240 etc | IANS | SANS Difference Makers Award