ipv6 network fail (newbie alert)

Sander Steffann sander at steffann.nl
Wed Mar 20 11:45:37 CET 2013


Hi,

> ok, so, it would be best to simply remove all icmp/icmp6 options,
> clear them all out, but then use :
> /usr/local/sbin/ip6tables -A INPUT -p icmpv6 --icmpv6-type echo-request -j DROP
> blocking nothing else?


Yes, that works. I personally don't even block echo-request, but that's your local policy decision.

Met vriendelijke groet,
Sander Steffann





More information about the ipv6-ops mailing list