I've heard this argument that site-local addresses somehow make the
site border router filtering problem easier, and I don't get it.  As
far as I can tell, they don't help at all, and in fact just make the
problem a little worse.  I have to filter all the kinds of addresess
that shouldn't be crossing my router anyway (eg, ingress filtering,
various whacky combinations of transition address spaces with various
kinds of IPv4 addresses, etc), whether applications in my site are
using site-local addresses or not.  Site-local addresses are just one
more flipping thing I have to filter.

So how were site-local addresess helping me with this problem again?
--------------------------------------------------------------------
IETF IPng Working Group Mailing List
IPng Home Page:                      http://playground.sun.com/ipng
FTP archive:                      ftp://playground.sun.com/pub/ipng
Direct all administrative requests to [EMAIL PROTECTED]
--------------------------------------------------------------------

Reply via email to