Extension headers and firewalls

Gert Doering gert at space.net
Sun Jul 22 12:40:42 CEST 2012


On Sat, Jul 21, 2012 at 01:38:06PM -0700, Cameron Byrne wrote:
> On Jul 20, 2012 1:17 AM, "Erik Kline" <ek at google.com> wrote:
> >
> > I know that (at least some models of) Brand J router ACLs can't filter
> when there are extension headers so the packets are usually just dropped.
>  Extension headers, and by extension, fragmentation, really kinda just
> don't work in the IPv6 world right now.  :-(
> >
> >
> Perhaps this functionality should be officially depricated.

Which functionality?  Extention headers, or "limited implementations that
fall over extention headers, but get marketed as 'full IPv6 support'"?

Gert Doering
        -- NetMaster
have you enabled IPv6 on something today...?

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (89) 32356-444            USt-IdNr.: DE813185279

More information about the ipv6-ops mailing list