Hi Benny!

Aug 14 13:47 2018, Benny Pedersen wrote to Markus Reschke:

 MR>> I get 20/20 with a RFC4890 based ICMP filter set.

 BP> not all isps knows that rfcs in detail

Everyone dealing with firewalls/ACLs should know that RFC or its existence at 
least. Its the essential rule set for making IPv6 work.

 BP> or modem and or router firmware does not care of it

The vendors of the small plastic routers are trying to motivate you to buy a 
new box every two years. A lot of those plastic boxes supporting IPv6 still 
don't have a proper IPv6 firewall. The sad thing is that the box' firmware 
(typically linux) has full IPv6 support, just the web UI lacks the option for 
configuring all the IPv6 goodness.

 BP> i am happy with shorewall

Nearly all open source firewalls/routers are far ahead of commercial plastic 
boxes.

ciao,
Markus

---