Skip to main content

Recommendations for Filtering ICMPv6 Messages in Firewalls
RFC 4890

Revision differences

Document history

Date By Action
2020-01-21
(System) Received changes through RFC Editor sync (added Verified Errata tag)
2018-12-20
(System)
Received changes through RFC Editor sync (changed abstract to 'In networks supporting IPv6, the Internet Control Message Protocol version 6 (ICMPv6) plays a fundamental role …
Received changes through RFC Editor sync (changed abstract to 'In networks supporting IPv6, the Internet Control Message Protocol version 6 (ICMPv6) plays a fundamental role with a large number of functions, and a correspondingly large number of message types and options. ICMPv6 is essential to the functioning of IPv6, but there are a number of security risks associated with uncontrolled forwarding of ICMPv6 messages. Filtering strategies designed for the corresponding protocol, ICMP, in IPv4 networks are not directly applicable, because these strategies are intended to accommodate a useful auxiliary protocol that may not be required for correct functioning.

This document provides some recommendations for ICMPv6 firewall filter configuration that will allow propagation of ICMPv6 messages that are needed to maintain the functioning of the network but drop messages that are potential security risks. This memo provides information for the Internet community.')
2015-10-14
(System) Notify list changed from v6ops-chairs@ietf.org to (None)
2007-05-16
Amy Vezza State Changes to RFC Published from RFC Ed Queue by Amy Vezza
2007-05-16
Amy Vezza [Note]: 'RFC 4890' added by Amy Vezza
2007-05-11
(System) RFC published