[nsp-sec] IPv6 type 0 route header probes from Tsinghua University

Hank Nussbacher hank at efes.iucc.ac.il
Mon May 4 02:42:08 EDT 2009


For about 2 months now, on an incessent daily basis we see these IPv6 route 
header probes:
list filter-rh/10 denied icmpv6 2001:DA8:AE:200:211:25FF:FE9D:CA48 -> 
2001:BF8::1 (128/0)

We use:
ipv6 access-list filter-rh
  deny ipv6 any any log routing
  permit ipv6 any any
[see: http://www.cisco.com/warp/public/707/cisco-sa-20070124-IOS-IPv6.shtml]
to filter them out but this same IPv6 route header probe from Tsinghua 
University has been hitting our router non-stop.  Can anyone on this list 
assist in making this stop?

Thanks,
Hank




More information about the nsp-security mailing list