IPv6 Ingress traffic by default

Owen DeLong owen at delong.com
Mon Jun 20 23:33:46 UTC 2016


> 
> And that is the fault of the Raspberry PI.  There is zero reason for
> the Raspberry PI to be open to the world before it has been configured.
> It could have a initial configuration that is just
> 
> 	permit <local-prefixes>/64 any port 22
> 	deny any any port 22

It’s very hard to configure a Raspberry PI using Cisco’s filter language.

I don’t know of any case where this will work.

Owen




More information about the NANOG mailing list