BCP for securing IPv6 Linux end node in AWS
erey at ernw.de
Sun May 14 14:12:13 UTC 2017
in addition to RFC 4980 mentioned in another post you might consider the following sources as a starting point:
On Sun, May 14, 2017 at 09:29:45AM -0400, Eric Germann wrote:
> Good morning all,
> I???m looking for some guidance on best practices to secure IPv6 on Linux end nodes parked in AWS.
> Boxes will be running various services (DNS for starters) and I???m looking to secure mainly ICMP at this point. Service filtering is fairly cut and dried.
> I???ve reviewed some of the stuff out there, but apparently I???m catching too many of the ICMP types in the rejection as routing eventually breaks. My guess is router discovery gets broken by too tight of filters.
> Thanks for any guidance.
ERNW GmbH - Carl-Bosch-Str. 4 - 69115 Heidelberg - www.ernw.de
Tel. +49 6221 480390 - Fax 6221 419008 - Cell +49 173 6745902
Handelsregister Mannheim: HRB 337135
Geschaeftsfuehrer: Enno Rey
Blog: www.insinuator.net || Conference: www.troopers.de
More information about the NANOG