[17936] in North American Network Operators' Group
Re: GRE packets
daemon@ATHENA.MIT.EDU (Danny McPherson)
Wed Jun 17 18:30:54 1998
To: "Paul G. Donner" <pdonner@cisco.com>
cc: Eric Germann <ekgermann@cctec.com>, nanog@merit.edu
From: Danny McPherson <danny@genuity.net>
Reply-To: danny@genuity.net
Date: Wed, 17 Jun 1998 15:23:57 -0700
Perhaps to combat this, unless I'm missing something, one could justifiably
deploy GRE filters with source & destination addresses of the exchange
subnets. Filtering GRE in general seems nothing more than foolish.
-danny
[snip]
(we certainly allow GRE packets and expect everyone else does, too)
> This could kill IP-GRE VPNs indiscriminately.
