[ipv6-wg] IPv6 filtering in an ISP environment

Team Cymru does a nice job of keeping an updated bogon list.. it's on
you to keep pulling it though to keep your local policy accurate.  You
can get it in a variety of formats as well:
http://www.team-cymru.org/Services/Bogons/

They also maintain base filter templates:
http://www.team-cymru.org/ReadingRoom/Templates/IPv6Routers/

--Heather

On Wed, May 18, 2011 at 6:51 AM, Erik Bais <ebais at a2b-internet.com> wrote:
> Hi,
>
>
>
> I’m looking for examples on what people have implemented as ingress
> filtering for IPv6 prefixes in an BGP environment.
>
>
>
> I’m would like to get some sort of filter that will not require daily
> maintenance based on assigned prefixes by the RIR.
>
>
>
> I’m leaning towards having some sort of filtering based on:
>
>
>
> Drop anything from bogon list
>
>
>
> allow RIR PA space – between /12 - /35
>
> Allow RIR PI space between /32 - /48.  (For instance for the RIPE
> 2001:67c::/32 & 2001:7f8::/32 parts )
>
>
>
> So basically, a bit more strict filter than allow 2003::/3 and not having to
> update it daily with each assignment made J
>
>
>
> Also some insight in why you have selected to filter on a specific prefix
> length is very helpful.
>
>
>
> Erik Bais
>
>