[118107] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: IPv6 filtering (was Re: IPv6 internet broken,

daemon@ATHENA.MIT.EDU (Seth Mattinen)
Mon Oct 12 17:45:35 2009

Date: Mon, 12 Oct 2009 14:44:58 -0700
From: Seth Mattinen <sethm@rollernet.us>
To: nanog@nanog.org
In-Reply-To: <72A0BEAA-1C0C-417B-B9B3-6C19C6572487@marcoh.net>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

Marco Hogewoning wrote:
> 
> As this thread has drifted off topic any way, would it for instance be a
> good idea to simply not accept mail from hosts that clearly use
> autoconfig ie reject all smtp from EUI-64 addresses. Of course not a
> wise idea for your own outbound relays which should handle mail from
> your customers but on the incoming side it might as well save a lot of
> headache and there is no need to keep track of which /64 are access
> networks.
> 

That would be really, really bad. My 3750's won't accept arbitrary
/128's in an ACL unless it's EUI-64 or I make up something similar that
it will like. I'm sure I'm not the only person who owns a 3750. As such,
my mail servers are using EUI-64 addresses.

~Seth


home help back first fref pref prev next nref lref last post