[137290] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: BCP38 considerations in IPv6

daemon@ATHENA.MIT.EDU (William F. Maton Sotomayor)
Thu Feb 10 16:55:43 2011

Date: Thu, 10 Feb 2011 16:55:34 -0500 (EST)
From: "William F. Maton Sotomayor" <wmaton@ryouko.imsb.nrc.ca>
To: Ryan Rawdon <ryan@u13.net>
In-Reply-To: <acd7c570039e58b67bbf64e467f4b12b@192.168.152.50>
Cc: nanog@nanog.org
Reply-To: wmaton@ryouko.imsb.nrc.ca
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

On Thu, 10 Feb 2011, Ryan Rawdon wrote:

> What considerations should be made with respect to implementing egress
> filtering based on source IPv6 addresses? Things like allowing traffic
> sourced from fe80::/10 in said filters for on-link communication (for the
> interface that the filter is applied to).  Is there anything else that
> should be taken into account while implementing BCP38 egress filtering in
> IPv6?

That's a consideration, and one other candidate which has already been 
welcomed to my black-hole server:  2001:DB8::/32.

I'll leave that as an exercise to everyone to see who's block that is. :-)

wfms


home help back first fref pref prev next nref lref last post