IPv6 ingress filtering

[Gert Doering]

Hi,

On Sat, May 18, 2019 at 08:06:00AM +1200, Brian E Carpenter wrote:
> And surely the question is "What would produce the most help desk calls?".
> Filtering something that is presumably working for its remaining users
> might not be a good idea from that point of view.

Oh, since those are not *my* users, it's not my helpdesk.

Which is, annoyingly enough, the grand problem with IPv6 anyway - 
"someone messing up their v6" will inevitably cause helpdesk calls
*elsewhere*.

Like this beauty discovered by someone today:

$ host -t aaaa bayerwaldhof.de
bayerwaldhof.de has IPv6 address ::

... the helpdesk calls will happen on the dual-stacked ISP side,
not on the messed-up content side...

Those that stick to v4-only are usually spared any helpdesk calls.

*sigh*

Gert Doering
        -- NetMaster
-- 
have you enabled IPv6 on something today...?

SpaceNet AG                      Vorstand: Sebastian v. Bomhard, Michael Emmer
Joseph-Dollinger-Bogen 14        Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                 HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444         USt-IdNr.: DE813185279
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
Url : http://lists.cluenet.de/pipermail/ipv6-ops/attachments/20190517/a43c9159/attachment.bin