BCP for securing IPv6 Linux end node in AWS

Bjørn Mork bjorn at mork.no
Sun May 14 13:54:29 UTC 2017


Alarig Le Lay <alarig at swordarmor.fr> writes:

> So, my advise is simply to not filter ICMP and ICMPv6. And by the way,
> why do want to filter ICMP? You will not be DDoSed with pings.


I tend to agree.  But if you still want to do it, then there is some
advice in https://tools.ietf.org/html/rfc4890


Bjørn


More information about the NANOG mailing list