ipv6 network fail (newbie alert)

Philipp Kern phil at philkern.de
Wed Mar 20 11:56:35 CET 2013


On Wed, Mar 20, 2013 at 11:45:37AM +0100, Sander Steffann wrote:
> > ok, so, it would be best to simply remove all icmp/icmp6 options,
> > clear them all out, but then use :
> > /usr/local/sbin/ip6tables -A INPUT -p icmpv6 --icmpv6-type echo-request -j DROP
> > blocking nothing else?
> Yes, that works. I personally don't even block echo-request, but that's your
> local policy decision.

If you don't mind connection establishment from/to Teredo clients to go wrong.

Kind regards
Philipp Kern 



More information about the ipv6-ops mailing list