Re: [v6ops] [IPv6] [OPSEC] Why folks are blocking IPv 6 extension headers? (Episode 1000 and counting) (Linux DoS)

[Tom Herbert <[e-mail]>]

On Fri, May 26, 2023 at 1:44 PM Fernando Gont <[e-mail]> wrote:
>
>
>
> On 26/5/23 18:01, Tom Herbert wrote:
> > On Fri, May 26, 2023 at 8:12 AM Fernando Gont <[e-mail]> wrote:
> [...]
> >>
> >> That said, I'm not that fine if invited to a party where, if anything, I
> >> will only pay the bills. So, I block everything that I don't use. e.g.,
> >> I have no use for EHs in any of my servers, except the pentesting boxes
> >> that I use to send weird packets to others.
> >
> > Fernando,
> >
> > If you're making that decision as the operator of a public network
> > then you are not making that decision for yourself, but you're making
>
> RFC9098.
>
> > a "big brother" decision for others and preventing permissionless
> > innovation as Brian stated nicely. I don't believe it could be claimed
> > that this is for "the good of the Internet".
>
> Companies are run to make money, not for the good of the Internet.

And IETF exists for the good of the Internet and the world's
population, not so your company can make money!

>
> And if your clients get downtime as a result of you keeping things wide
> open "for the good Internet", you'll likely have an interesting
> (unpleasant) conversation with your upstream management.
>
> Thanks,
> --
> Fernando Gont
> SI6 Networks
> e-mail: [e-mail]
> PGP Fingerprint: F242 FF0E A804 AF81 EB10 2F07 7CA1 321D 663B B494