On Wednesday, June 8, 2016, Baldur Norddahl <[email protected]> wrote:
> > > On 2016-06-08 07:27, Mark Andrews wrote: > >> In message <[email protected]>, Tore >> Anderson writes: >> >>> * Davide Davini <[email protected]> >>> >>> Blocking access to Netflix via the tunnel seems like an obvious >>> solution to me, for what it's worth. >>> >> And which set of prefixes is that? How often do they change? etc. >> >> > A start would be blocking 2620:108:700f::/64 as discovered by a simple DNS > lookup on netflix.com. I am not running a HE tunnel (I got native IPv6) > and I am not blocked from accessing Netflix over IPv6 so can't really try > it. I am curious however that none of the vocal HE tunnel users here > appears to have tried even simple counter measures such as a simple > firewall rule to drop traffic to that one /64 prefix. > That's a start but Netflix has a few more prefixes than that: http://bgp.he.net/AS2906#_prefixes6
