Hi Benny!

Aug 14 23:47 2018, Benny Pedersen wrote to Michiel van der Vlist:

 MvdV>> - Allow PING

 BP> this could drain your internet to the knees, you must make sure to 
 BP> reatelimit that allows

+1 :)

 MvdV>> - Allow Packet too large

 BP> insecure imho

It's necessary for Path MTU Discovery. But there also an additional method not 
based on ICMP. Anyway, in IPv6 routers don't perform packet fragmentation as in 
IPv4. So the endpoints have to take care about the MTU via Path MTU Discovery. 

ciao,
Markus

---