If the reason for the failure to deliver is administrative prohibition, e.g., a "firewall filter", the Code field is set to 1.
If the reason for the failure to deliver is that packets with this source address is not allowed due to ingress filtering policies, the Code field is set to 5. If the reason for the failure to deliver is that the route to the destination is a reject route, the Code field is set to 6. This may occur if the router has been configured to reject all the traffic for a specific prefix. Isn't a reject route just a simple type of firewall/administrative prohibition? Likewise for ingress filtering? Is the intent to distinguish between "packet was dropped because policy says packets from that source should be dropped" and "packet was dropped because policy says that packets to that destination should be dropped"? - Bill -------------------------------------------------------------------- IETF IPv6 working group mailing list [EMAIL PROTECTED] Administrative Requests: https://www1.ietf.org/mailman/listinfo/ipv6 --------------------------------------------------------------------