[nsp-sec] IPv6 type 0 route header probes from Tsinghua University
Hank Nussbacher
hank at efes.iucc.ac.il
Mon May 4 02:42:08 EDT 2009
For about 2 months now, on an incessent daily basis we see these IPv6 route
header probes:
list filter-rh/10 denied icmpv6 2001:DA8:AE:200:211:25FF:FE9D:CA48 ->
2001:BF8::1 (128/0)
We use:
ipv6 access-list filter-rh
deny ipv6 any any log routing
permit ipv6 any any
[see: http://www.cisco.com/warp/public/707/cisco-sa-20070124-IOS-IPv6.shtml]
to filter them out but this same IPv6 route header probe from Tsinghua
University has been hitting our router non-stop. Can anyone on this list
assist in making this stop?
Thanks,
Hank
More information about the nsp-security
mailing list