Request comment: list of IPs to block outbound
Enno Rey
erey at ernw.de
Sun Oct 13 16:40:09 UTC 2019
Hi,
On Sun, Oct 13, 2019 at 08:58:17AM -0700, Stephen Satchell wrote:
> The following list is what I'm thinking of using for blocking traffic
> between an edge router acting as a firewall and an ISP/upstream. This
> fe80::/10 Link Link-local address.
most people allow that range as blocking it will drop NA/NS packets with the upstream router which in turn can delay the establishment of the BGP session (provided there is one over IPv6).
best
Enno
--
Enno Rey
https://theinternetprotocol.blog
Twitter: @Enno_Insinuator
More information about the NANOG
mailing list