[171221] in North American Network Operators' Group
RE: Requirements for IPv6 Firewalls
daemon@ATHENA.MIT.EDU (Matthew Huff)
Tue Apr 22 16:16:28 2014
From: Matthew Huff <mhuff@ox.com>
To: Christopher Morrow <morrowc.lists@gmail.com>
Date: Tue, 22 Apr 2014 20:15:37 +0000
In-Reply-To: <CAL9jLaZRj6P2R6vO2cdFXKrCjaoTbUdZJkLp7iod7_Vfz4K2fA@mail.gmail.com>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org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