<p dir="ltr"><br>
On 23 Nov 2015 6:26 PM, "Jeremy Visser" <<a href="mailto:jeremy.visser@gmail.com">jeremy.visser@gmail.com</a>> wrote:<br>
><br>
> On Mon, Nov 23, 2015 at 2:15 PM, David Hughes <<a href="mailto:david@hughes.com.au">david@hughes.com.au</a>> wrote:<br>
> > Team Cymru could be a good first point of reference.<br>
> ><a href="https://www.cymru.com/Documents/icmp-messages.html"> https://www.cymru.com/Documents/icmp-messages.html</a><br>
><br>
> Ouch. That page doesn't suggest allowing ICMP "Packet Too Big" which<br>
> is a recipe for tarpitting TCP should you use IPv6 on a <1500 MTU<br>
> network and don't hack your TCP MSS.<br>
></p>
<p dir="ltr">The better you look, the more you see.<br></p>
<p dir="ltr">IPv6 version:</p>
<p dir="ltr">"Recommendations for Filtering ICMPv6 Messages in Firewalls"<br>
<a href="https://tools.ietf.org/html/rfc4890">https://tools.ietf.org/html/rfc4890</a><br></p>
<p dir="ltr">Toot!</p>
<p dir="ltr"><a href="http://www.slideshare.net/mobile/MarkSmith214/wysrrfcsandids">http://www.slideshare.net/mobile/MarkSmith214/wysrrfcsandids</a> _______________________________________________<br>
> AusNOG mailing list<br>
><a href="mailto:AusNOG@lists.ausnog.net"> AusNOG@lists.ausnog.net</a><br>
><a href="http://lists.ausnog.net/mailman/listinfo/ausnog"> http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
</p>