nanog mailing list archives

Re: BCP for securing IPv6 Linux end node in AWS


From: Bjørn Mork <bjorn () mork no>
Date: Sun, 14 May 2017 15:54:29 +0200

Alarig Le Lay <alarig () swordarmor fr> writes:

So, my advise is simply to not filter ICMP and ICMPv6. And by the way,
why do want to filter ICMP? You will not be DDoSed with pings.


I tend to agree.  But if you still want to do it, then there is some
advice in https://tools.ietf.org/html/rfc4890


Bjørn


Current thread: