At this point in time I have absolutely zero ipv6 in my network and yes, it is filtered (completely) at my border. And most definitely none of my DNS servers are listening on v6.
-- Larry Smith lesm...@ecsis.net On Tue October 13 2020 10:18, Mark Radabaugh wrote: > I believe this was specific to IPv6. Are you sure you are filtering IPv6 > and not just IPv4? > > Mark > > > On Oct 13, 2020, at 8:51 AM, Larry Smith <lesm...@ecsis.net> wrote: > > > > Hmmmmm, got one yesterday, then three more this morning. > > They appear to be going down my AS contact list - one this morning > > was to "abuse". They are now blocked here. > > > > All four advertising their DSAV - Destination-Side Source Address > > Validation. > > > > And I have had filters blocking my IP from outside my network for over 20 > > years. Also block anything leaving my network that is not my IP (and log > > it). > > > > -- > > Larry Smith > > lesm...@ecsis.net > > > > On Mon October 12 2020 22:57, John Osmon wrote: > >> On Mon, Oct 12, 2020 at 05:49:18PM -0400, Mark - Myakka Technologies > >> wrote: [...] > >> > >>> I can not think of any > >>> valid reason for someone to spoof my IP on incoming packets. > >> > >> There are some asymmetrical cases where you may see your own addresses > >> coming in over an edge router. Most of them are solved better with > >> VPNs, but they do exist. > >> > >> There are few cases anymore where not following BCP38 is required... > > > > -- > > AF mailing list > > AF@af.afmug.com > > http://af.afmug.com/mailman/listinfo/af_af.afmug.com -- AF mailing list AF@af.afmug.com http://af.afmug.com/mailman/listinfo/af_af.afmug.com
