[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
IPv6 filtering
- Subject: IPv6 filtering
- From: rdobbins at arbor.net (Roland Dobbins)
- Date: Wed, 26 Jan 2011 12:13:26 +0700
- In-reply-to: <32507261.286.1296018229100.JavaMail.franck@franck-martins-macbook-pro.local>
- References: <32507261.286.1296018229100.JavaMail.franck@franck-martins-macbook-pro.local>
On Jan 26, 2011, at 12:03 PM, Franck Martin wrote:
> Ok filtering ipv6 and ipv6-icmp is understood, it is like ipv4.
Be advised, ICMPv6 is *not* like ICMP in IPv4, and knowing what can be filtered, what to filter, and where to filter it is considerably more complex than in IPv4 - which, given the prevalence of broken PMTU-D alone, is apparently not well-understood in many quarters, heh.
------------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>
Most software today is very much like an Egyptian pyramid, with millions
of bricks piled on top of each other, with no structural integrity, but
just done by brute force and thousands of slaves.
-- Alan Kay