[105828] in North American Network Operators' Group
Re: IPv6 Prefix Policy
daemon@ATHENA.MIT.EDU (Jeroen Massar)
Thu Jul 3 12:53:02 2008
Date: Thu, 03 Jul 2008 18:52:10 +0200
From: Jeroen Massar <jeroen@unfix.org>
To: nanog@nanog.org
In-Reply-To: <20080703151237.GB96994@ussenterprise.ufp.org>
Cc: Gert Doering <gert@space.net>
Errors-To: nanog-bounces@nanog.org
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig4C1EC627E730277BC6422332
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable
Leo Bicknell wrote:
> In a message written on Thu, Jul 03, 2008 at 04:55:37PM +0200, Jeroen M=
assar wrote:
>> In general though, ASNs are following:
>> http://www.space.net/~gert/RIPE/ipv6-filters.html
>>
>> I don't know how common the strict/non-strict case is though, but=20
>> looking at GRH (http://www.sixxs.net/tools/grh/) it seems that most=20
>> ASN's are properly filtering, thus using the strict model.
>=20
> The strict filter is still broken in at least one way.
Then mail Gert Doering about it, if he doesn't know he can't update it ;)=
> ipv6 prefix-list ipv6-ebgp-strict permit 2001:500::/30 ge 48 le 48
>=20
> http://www.arin.net/reference/micro_allocations.html
>=20
> Note that there are /45's, /46's, /47's and /48's right now. The
> filter allows only /48's. Of note, this will break access to the
> F-Root name server, we announce it from both a /47 and a /48 (local
> peers only) in IPv6.
>=20
> I believe there are other issues with the strict filter, but don't have=
> the time to track them down right now.
If you have them, please pass them on to Gert and possibly also spam=20
ipv6-ops.
Greets,
Jeroen
--------------enig4C1EC627E730277BC6422332
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
iD8DBQFIbQO6KaooUjM+fCMRAtXbAJ9+qfsFO2soYEAZYvOB915qqs+qgwCfTEwL
/PNsX00og1U1igXPKqjYb0o=
=6S5c
-----END PGP SIGNATURE-----
--------------enig4C1EC627E730277BC6422332--