Hello,

On 10/7/24 12:46 PM, Tim Chown via ipv6-wg wrote:

Hi,

On 07/10/2024, 10:27, "Gert Doering" <gert@space.net> wrote:

Hi Tim,

On Mon, Oct 07, 2024 at 09:03:57AM +0000, Tim Chown via ipv6-wg wrote:

> You might also want to look at RFC 4890, though that is enterprise focused.

That serves as a good background for understanding (and maybe for the

"enterprise side" of the ISP, namely the backend systems).

For "the ISP provides access to the Internet", I would expect my ISP to

pass IP packets back and forth,

Sure but ... no. ISPs drop/limit (as they should) many packets from/to subscribers, packets that are DDoS attack vectors: various UDP amplifications (DNS, NTP Chargen, SNMP, etc), sometimes fragments and you know what? ICMP(v4) also, as has been known to resurface as an attack vector in carpet bombing attacks. I'll be honest, I haven't seen much ICMPv6 used in the same fashion, but there again I haven't seen many IPv6-based DDoS attacks. I always believed that a sane and selective implementation of rfc4890 was not a bad thing, even for ISPs, even for their customers.

Cheers,
Yannis

and not apply heuristics on why they

would want to drop some of them, based on "enterprise needs this"...

(I'm fairly sure we agree on this, but the casual reader on the list might

not see this destinction - thus, stressing it)

Yes, very much agree, as per EHs more generally.

Tim

Gert Doering

        -- NetMaster

--

have you enabled IPv6 on something today...?

SpaceNet AG                      Vorstand: Sebastian v. Bomhard, Ingo Lalla,

                                           Karin Schuler, Sebastian Cler

Joseph-Dollinger-Bogen 14        Aufsichtsratsvors.: A. Grundner-Culemann

D-80807 Muenchen                 HRB: 136055 (AG Muenchen)

Tel: +49 (0)89/32356-444         USt-IdNr.: DE813185279
-----
To unsubscribe from this mailing list or change your subscription options, please visit: https://mailman.ripe.net/mailman3/lists/ipv6-wg.ripe.net/
As we have migrated to Mailman 3, you will need to create an account with the email matching your subscription before you can change your settings. 
More details at: https://www.ripe.net/membership/mail/mailman-3-migration/