ip6tables: ipv6-icmp vs icmp https://www.jethrocarr.com/2013/02/09/ip6tables-ipv6-icmp-vs-icmp/
Conversation
Notices
-
Stanislas :nixos: (angristan@mstdn.io)'s status on Tuesday, 04-Sep-2018 05:50:04 JST Stanislas :nixos: -
Pingex (pingex@mstdn.io)'s status on Tuesday, 04-Sep-2018 07:06:15 JST Pingex @angristan yea I got screwed on that difference a long time ago while making my ip6tables rules.
IPv6 ICMP is fundamentally different, as network signalling is no longer its sole mission. It also now replaces ARP, IGMP, DHCP (for the auto-configuration part), and a bunch of other protocols you could find in IPv4.
needless to say that plain dropping of IPv6 ICMP is a terrible mistake to make.Stanislas :nixos: repeated this. -
Stanislas :nixos: (angristan@mstdn.io)'s status on Tuesday, 04-Sep-2018 07:06:31 JST Stanislas :nixos: @pingex Indeed!
-