> > 5 - source address failed ingress policy > [...] > > > > If the reason for the failure to deliver is that packets > with this > > source address is not allowed due to ingress filtering > policies, the > > Code field is set to 5. > > One minor comment here: this code could also be applicable to egress > policies, if the site is practising those. (That is, before sending > the traffic off to your upstream interface, check at the outbound > interface that the source address belongs to your site prefixes.) > Pedantically that's egress filtering. > > Should we just replace "ingress" with "ingress/egress"?
Makes sense. will change that. Regards Mukesh -------------------------------------------------------------------- IETF IPv6 working group mailing list [EMAIL PROTECTED] Administrative Requests: https://www1.ietf.org/mailman/listinfo/ipv6 --------------------------------------------------------------------