[c-nsp] IPv6

Phil Mayers p.mayers at imperial.ac.uk
Tue Mar 16 12:18:45 EDT 2010


On 16/03/10 15:14, Drew Weaver wrote:
> Hi,
>
> I'm not sure I would want that many port scans, etc being bounced off
> of my 'connected' router interfaces whether the rest of the IPs are
> 'routed' or not.

Well, you've got iACLs right?

;o)

Seriously I found the NANOG presentations interesting; the potential NDP 
DoS is somewhat concerning (we use /112) and I'll definitely be 
considering carefully what we do.


More information about the cisco-nsp mailing list