NIST IPv6 document

Owen DeLong owen at delong.com
Mon Jan 10 23:04:23 UTC 2011


On Jan 10, 2011, at 5:56 AM, Tim Chown wrote:

> 
> On 7 Jan 2011, at 15:12, Justin M. Streiner wrote:
> 
>> On Thu, 6 Jan 2011, Jeff Wheeler wrote:
>> 
>>> On Thu, Jan 6, 2011 at 8:47 PM, Owen DeLong <owen at delong.com> wrote:
>>>> 1.      Block packets destined for your point-to-point links at your
>>>>       borders. There's no legitimate reason someone should be
>>> 
>>> Most networks do not do this today.  Whether or not that is wise is
>>> questionable, but I don't think those networks want NDP to be the
>>> reason they choose to make this change.
>> 
>> Correct me if I'm wrong, but wouldn't blocking all traffic destined for your infrastructure at the borders also play havoc with PTMUD?  Limiting the traffic allowed to just the necessary types would seem like a reasonable alternative.
> 
> Recommendations for PTMUD-friendly filtering are described in RFC 4890.
> 
> Tim

Unless my point-to-point links are originating packets to the outside world
(they should not be, in general), then I should not expect any PMTU-D
responses directed at them.

As such, blocking even those packets TO my point-to-point interfaces
should not be problematic.

Owen





More information about the NANOG mailing list