New RIPE allocations outside 2001::/16 - filter update time!

Kevin Loch kloch at hotnic.net
Mon May 2 18:25:52 CEST 2005


Daniel Roesen wrote:
 > While you're updating your filters anyway, please revisit your
 > decisions and consider using a "relaxed" version. For examples, see:
 >
 > http://www.space.net/~gert/RIPE/ipv6-filters.html

The strict filters on that page haven't been updated yet.

Here's an updated 'strict' filter:

ipv6 prefix-list strict seq 5 deny 2001:db8::/32 le 128
ipv6 prefix-list strict seq 10 permit 2001::/21 ge 35 le 35
ipv6 prefix-list strict seq 15 permit 2001:500::/30 ge 48 le 48
ipv6 prefix-list strict seq 20 permit 2001::/16 ge 19 le 32
ipv6 prefix-list strict seq 25 permit 2002::/16
ipv6 prefix-list strict seq 30 permit 2003::/16 ge 19 le 32
ipv6 prefix-list strict seq 35 permit 2600::/22 ge 23 le 32
ipv6 prefix-list strict seq 40 permit 2604::/22 ge 23 le 32
ipv6 prefix-list strict seq 45 permit 2608::/22 ge 23 le 32
ipv6 prefix-list strict seq 50 permit 260c::/22 ge 23 le 32
ipv6 prefix-list strict seq 55 permit 2a00::/21 ge 22 le 32
ipv6 prefix-list strict seq 60 permit 3ffe::/18 ge 24 le 24
ipv6 prefix-list strict seq 65 permit 3ffe:4000::/18 ge 32 le 32
ipv6 prefix-list strict seq 70 permit 3ffe:8000::/22 ge 28 le 28
ipv6 prefix-list strict seq 75 deny ::/0 le 128

which is also a little more strict on /35's.

- Kevin



More information about the ipv6-ops mailing list