<html>
<body>
<font size=3><x-tab>
</x-tab>Gert,<br><br>
<x-tab> </x-tab>On Cisco
routers able to be configured as MIPv6 HA then you can use the Routing
Type filter from<br>
the previous e-mail beginning with IOS 12.4(2)T<br><br>
Regards<br>
Patrick<br><br>
<br>
At 05:48 PM 4/30/2007, Gert Doering wrote:<br>
<blockquote type=cite class=cite cite="">Hi,<br><br>
On Mon, Apr 30, 2007 at 05:46:12PM +0200, Sebastian Wiesinger wrote:<br>
> > - all the nice and shiny IPv6 filtering stuff isn't available
in <br>
> > 12.2S-based releases yet. Thanksverymuch.<br>
> <br>
> Oh. That's a bummer. Well I'm out of ideas. Perhaps using a bridge
to<br>
> filter it on L2 if possible.<br><br>
Haaaahaha :-)<br><br>
What you *can* do is drop all routing headers, but then you break<br>
Mobile IPv6. Which nobody is using. <br><br>
OTOH, using control plane policing, policing packets with RH headers
<br>
targetting your routers down to "100 pps" *should* definitely
reduce the <br>
usefulness of RH0 attacks using these routers as "bounce point"
- if it <br>
is properly supported, which I'm not 100% sure right now.<br><br>
Gert Doering<br>
-- NetMaster<br>
-- <br>
Total number of prefixes smaller than registry allocations:
113403<br><br>
SpaceNet
AG
Vorstand: Sebastian v. Bomhard<br>
Joseph-Dollinger-Bogen
14
Aufsichtsratsvors.: A. Grundner-Culemann<br>
D-80807
Muenchen
HRB: 136055 (AG Muenchen)<br>
Tel: +49 (89)
32356-444
USt-IdNr.: DE813185279</font></blockquote></body>
</html>