Re: ipv6 bogon / martian filter - simple

["William F. Maton Sotomayor" <wmaton () ryouko imsb nrc ca>]

On Mon, 14 Jun 2010, Brandon Applegate wrote:

> I mean really simple.  Like 2000::/3.  If it's not in there it's bogon, yes ?

Been using that on the advanced networks side for ... OK, years.  Seems to 
work.  Kept unseemingly bogons like 1000::/3 out, except for the 
deprecated 6bone pTLA, 3FFF::

> What I'm really asking, is for folks thoughts on using this - is it too 
> restrictive ?

For leaks of old 6bone space, which I haven't seen for a long while, 
probably not.  But filter aginst that, and maybe it will be fine.  It's 
all in the RIR allocations....

> How long until it's obsolete ?
>
> Should be a really long time no ?

Mmm...Last table entry in my table is: 2C0F:FE18::/32.  Maybe 2000::/4 
will do, but that might not last very long as an ACL, given the proximty 
of 2Cxx:: to 2FFF::

> Again, just looking for some feedback either way.  Would be very nice to have 
> a single line ACL do this job.
>
> --
> Brandon Applegate - CCIE 10273
> PGP Key fingerprint:
> 7407 DC86 AA7B A57F 62D1 A715 3C63 66A1 181E 6996
> "SH1-0151.  This is the serial number, of our orbital gun."


wfms