18 Mar
2018
18 Mar
'18
6:54 p.m.
On Sat, Mar 17, 2018, at 12:36, Denis Fondras wrote:
donc effectivement zéro filtrage icmpv6 !
Voir RFC4890
Version TL;DR: - 6 (transit)/21 (local) types de messages MUST NOT Drop - 6 / 2 types SHOULD NOT Drop - 3 types Policy SHOULD be defined - 3+experimental+not defined = SHOULD drop
=> soit "permit icmpv6 any any" soit lire et comprendre plusieurs RFCs (pas seulement 4890 qui est juste la base de depart).