>   Ingress filtering and firewalls exist already.
>    
> => for IPv6? I'd like this is true but can you say more
> (which IOS version has IPv6 unicast RPF and/or IPv6 advanced access lists,
> which commercial firewalls have IPv6 support?)
>
> => no, we talk about commercial firewalls even if I share my not-expressed
> opinion about them.

Francis, I really don't want to define the word "exists" as equivalent
to "included in IOS". Nor do I equate it with "exists commercially".
So, like Pekka Savola noted, there's a open source OSes that deal
with both v6 packets as well as with v4 packets in their firewall and
filtering functions. I also know some leading firewall and VPN vendors
who are working on v6 versions of their products.

But perhaps you meant that ingress filtering isn't generally applied for
v6 yet. That might well be true. But I still don't want you take away my
possibility to go out tomorrow and buy a linux box/product and configure it to
do ingress filtering in my home!

Jari



--------------------------------------------------------------------
IETF IPng Working Group Mailing List
IPng Home Page:                      http://playground.sun.com/ipng
FTP archive:                      ftp://playground.sun.com/pub/ipng
Direct all administrative requests to [EMAIL PROTECTED]
--------------------------------------------------------------------

Reply via email to