Subj : Filered ICMP6 issue...
To   : Benny Pedersen
From : Markus Reschke
Date : Tue Aug 14 2018 18:52:52

Hi Benny!

Aug 14 13:47 2018, Benny Pedersen wrote to Markus Reschke:

 MR>> I get 20/20 with a RFC4890 based ICMP filter set.

 BP> not all isps knows that rfcs in detail

Everyone dealing with firewalls/ACLs should know that RFC or its existence at least. Its the essential rule set for making IPv6 work.

 BP> or modem and or router firmware does not care of it

The vendors of the small plastic routers are trying to motivate you to buy a new box every two years. A lot of those plastic boxes supporting IPv6 still don't have a proper IPv6 firewall. The sad thing is that the box' firmware (typically linux) has full IPv6 support, just the web UI lacks the option for configuring all the IPv6 goodness.

 BP> i am happy with shorewall

Nearly all open source firewalls/routers are far ahead of commercial plastic boxes.

ciao,
Markus

--- 
 * Origin: *** theca tabellaria *** (2:240/1661)

.