[190267] in North American Network Operators' Group
Re: IPv6 Ingress traffic by default
daemon@ATHENA.MIT.EDU (Owen DeLong)
Mon Jun 20 19:34:56 2016
X-Original-To: nanog@nanog.org
From: Owen DeLong <owen@delong.com>
In-Reply-To: <20160620220924.AEA6C4BD3A5C@rock.dv.isc.org>
Date: Mon, 20 Jun 2016 16:33:46 -0700
To: Mark Andrews <marka@isc.org>
Cc: NANOG list <nanog@nanog.org>, Mark Milhollan <mlm@pixelgate.net>
Errors-To: nanog-bounces@nanog.org
>=20
> And that is the fault of the Raspberry PI. There is zero reason for
> the Raspberry PI to be open to the world before it has been =
configured.
> It could have a initial configuration that is just
>=20
> permit <local-prefixes>/64 any port 22
> deny any any port 22
It=E2=80=99s very hard to configure a Raspberry PI using Cisco=E2=80=99s =
filter language.
I don=E2=80=99t know of any case where this will work.
Owen
