[105828] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: IPv6 Prefix Policy

daemon@ATHENA.MIT.EDU (Jeroen Massar)
Thu Jul 3 12:53:02 2008

Date: Thu, 03 Jul 2008 18:52:10 +0200
From: Jeroen Massar <jeroen@unfix.org>
To: nanog@nanog.org
In-Reply-To: <20080703151237.GB96994@ussenterprise.ufp.org>
Cc: Gert Doering <gert@space.net>
Errors-To: nanog-bounces@nanog.org

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig4C1EC627E730277BC6422332
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable

Leo Bicknell wrote:
> In a message written on Thu, Jul 03, 2008 at 04:55:37PM +0200, Jeroen M=
assar wrote:
>> In general though, ASNs are following:
>> http://www.space.net/~gert/RIPE/ipv6-filters.html
>>
>> I don't know how common the strict/non-strict case is though, but=20
>> looking at GRH (http://www.sixxs.net/tools/grh/) it seems that most=20
>> ASN's are properly filtering, thus using the strict model.
>=20
> The strict filter is still broken in at least one way.

Then mail Gert Doering about it, if he doesn't know he can't update it ;)=


> ipv6 prefix-list ipv6-ebgp-strict permit 2001:500::/30 ge 48 le 48
>=20
> http://www.arin.net/reference/micro_allocations.html
>=20
> Note that there are /45's, /46's, /47's and /48's right now.  The
> filter allows only /48's.  Of note, this will break access to the
> F-Root name server, we announce it from both a /47 and a /48 (local
> peers only) in IPv6.
>=20
> I believe there are other issues with the strict filter, but don't have=

> the time to track them down right now.

If you have them, please pass them on to Gert and possibly also spam=20
ipv6-ops.

Greets,
  Jeroen




--------------enig4C1EC627E730277BC6422332
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFIbQO6KaooUjM+fCMRAtXbAJ9+qfsFO2soYEAZYvOB915qqs+qgwCfTEwL
/PNsX00og1U1igXPKqjYb0o=
=6S5c
-----END PGP SIGNATURE-----

--------------enig4C1EC627E730277BC6422332--


home help back first fref pref prev next nref lref last post