Using IPv6 with prefixes shorter than a /64 on a LAN

Roland Dobbins rdobbins at
Tue Jan 25 11:50:42 CST 2011

On Jan 26, 2011, at 12:44 AM, Jack Bates wrote:

> DDoS mitigation is handled differently. 

Concur 100%.  Also note that firewalls don't provide any sort of useful DDoS protection, marketing claims aside, so reaction tools such as S/RTBH, et. al. are required to protect stateful firewalls in front of client access LANs, and everything behind said stateful firewalls, from DDoS.

Roland Dobbins <rdobbins at> // <>

Most software today is very much like an Egyptian pyramid, with millions
of bricks piled on top of each other, with no structural integrity, but
just done by brute force and thousands of slaves.

			  -- Alan Kay

More information about the NANOG mailing list