Hi,

On Mon, Aug 14, 2023 at 09:57:22AM +0200, Michel Stam wrote:
> Can???t say I???ve seen it before, can the firewall be a bit too strict?

If a device sends packets with link-local addresses towards off-link
GUA addresses, such packets MUST be dropped.

Unfortunately, not all implementations do that - but not doing so is
a violation of one of the basic IPv6 RFCs.

(Also, forwarding LLA sourced packets off-link has no use case really -
where should the reply go to?)

Gert Doering
        -- NetMaster
-- 
have you enabled IPv6 on something today...?

SpaceNet AG                      Vorstand: Sebastian v. Bomhard, Michael Emmer
Joseph-Dollinger-Bogen 14        Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                 HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444         USt-IdNr.: DE813185279

Attachment: signature.asc
Description: PGP signature

-- 
ripe-atlas mailing list
ripe-atlas@ripe.net
https://lists.ripe.net/mailman/listinfo/ripe-atlas

Reply via email to