ipv6 network fail (newbie alert)
Philipp Kern
phil at philkern.de
Wed Mar 20 11:56:35 CET 2013
On Wed, Mar 20, 2013 at 11:45:37AM +0100, Sander Steffann wrote:
> > ok, so, it would be best to simply remove all icmp/icmp6 options,
> > clear them all out, but then use :
> > /usr/local/sbin/ip6tables -A INPUT -p icmpv6 --icmpv6-type echo-request -j DROP
> > blocking nothing else?
> Yes, that works. I personally don't even block echo-request, but that's your
> local policy decision.
If you don't mind connection establishment from/to Teredo clients to go wrong.
Kind regards
Philipp Kern
More information about the ipv6-ops
mailing list