ip6tables: ipv6-icmp vs icmp https://www.jethrocarr.com/2013/02/09/ip6tables-ipv6-icmp-vs-icmp/
Conversation
Notices
-
Stanislas :nixos: (angristan@mstdn.io)'s status on Tuesday, 04-Sep-2018 05:50:04 JST
Stanislas :nixos:
-
Pingex (pingex@mstdn.io)'s status on Tuesday, 04-Sep-2018 07:06:15 JST
Pingex
@angristan yea I got screwed on that difference a long time ago while making my ip6tables rules.
IPv6 ICMP is fundamentally different, as network signalling is no longer its sole mission. It also now replaces ARP, IGMP, DHCP (for the auto-configuration part), and a bunch of other protocols you could find in IPv4.
needless to say that plain dropping of IPv6 ICMP is a terrible mistake to make.Stanislas :nixos: repeated this. -
Stanislas :nixos: (angristan@mstdn.io)'s status on Tuesday, 04-Sep-2018 07:06:31 JST
Stanislas :nixos:
@pingex Indeed!
-