Subj : Filered ICMP6 issue...
To   : Benny Pedersen
From : Markus Reschke
Date : Wed Aug 15 2018 03:07:44

Hi Benny!

Aug 14 23:47 2018, Benny Pedersen wrote to Michiel van der Vlist:

 MvdV>> - Allow PING

 BP> this could drain your internet to the knees, you must make sure to 
 BP> reatelimit that allows

+1 :)

 MvdV>> - Allow Packet too large

 BP> insecure imho

It's necessary for Path MTU Discovery. But there also an additional method not based on ICMP. Anyway, in IPv6 routers don't perform packet fragmentation as in IPv4. So the endpoints have to take care about the MTU via Path MTU Discovery. 

ciao,
Markus

--- 
 * Origin: *** theca tabellaria *** (2:240/1661)

.