[94408] in North American Network Operators' Group
New GRH feature: Missing IPv6 prefixes => Many ISP's need IPv6 filter
daemon@ATHENA.MIT.EDU (Jeroen Massar)
Sun Jan 21 16:17:46 2007
Date: Sun, 21 Jan 2007 21:00:27 +0000
From: Jeroen Massar <jeroen@unfix.org>
To: nanog@nanog.org
Errors-To: owner-nanog@merit.edu
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig3689D2DCFA209B16D72DCDB5
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Hi,
It seems that there are quite a few ISP's with IPv6 capabilities that
are nicely filtering. Of course they also forget to actually update
those filters.
Blocks that are filtered by quite a number of ISP's that should not be
filtered are: 2001:500::/30, 2001:678::/29, 2400::/16, 2600::/12,
2620::/23, 2a00::/16, and 2a01::/16
Note that some of these also have blocks upto /48's because of IPv6 PI
space and micro allocations. Pay also special attention to 2001:678::/29
as that contains RIPE's Anycast TLD prefixes sized /48. It seems that
these are nicely filtered out (then again RIPE stuck it in the middle of
a block where only /32's come from normally)
The recommended filters can be found here:
http://www.space.net/~gert/RIPE/ipv6-filters.html
Please check your filters, to be able to easily able to do what you are
missing, you can use the following new GRH features:
Want to know what ISP's are missing your prefix? See:
http://www.sixxs.net/tools/grh/lg/
enter your prefix and look at the bottom.
Want to know which ISP's filter what exactly?
For ASN's peering with GRH, those can be looked up at:
http://www.sixxs.net/tools/grh/dfp/
see under the heading for Missing prefixes, select and go.
There are cross references between the tools so that you can look it
easily from both references.
Not peering with GRH yet? Check http://www.sixxs.net/tools/grh/peering/
and show the world that your IPv6 routing tables are okay. Which
benefits you, but also other folks as they can check without having to
find where to debug it ;)
Of course, for comments, questions, suggestions, bug reports, don't
hesitate to yell to info@sixxs.net!
Enjoy the week ;)
Greets,
Jeroen
--------------enig3689D2DCFA209B16D72DCDB5
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (MingW32)
Comment: Jeroen Massar / http://unfix.org/~jeroen/
iHUEARECADUFAkWz1G8uFIAAAAAAFQAQcGthLWFkZHJlc3NAZ251cGcub3JnamVy
b2VuQHVuZml4Lm9yZwAKCRApqihSMz58I6jaAJ0bP+3j+2MYvcO+bu/IImLYuWhA
5QCfSsrg64m46RKUjQ5DNKLO+/fyw3w=
=w3nK
-----END PGP SIGNATURE-----
--------------enig3689D2DCFA209B16D72DCDB5--
