News for hackers. Stuff that matters.

A comment on How bad is IPv4 address exhaustion?. Parent comment

Re:How bad is IPv4 address exhaustion? by chrisper on Thursday February 15, 2018 @09:44AM (#16384342)
When I set up IPv6 I learned that you have to let some things through your firewall, like ICMP, because the IPv6 protocol relies on it. When I blocked everything like I did with ipv4, it eventually stopped working.
[ Parent | on HN ]
Re:How bad is IPv4 address exhaustion? by cesarb on Thursday February 15, 2018 @09:54AM (#16384439)
If you block everything with IPv4, things stop working too: you have to allow at least some ICMP (for "packet too big" path MTU discovery), otherwise you will have hard-to-diagnose issues.
[ Parent | on HN ]
Re:How bad is IPv4 address exhaustion? by jsjohnst on Thursday February 15, 2018 @11:54AM (#16385524)
Less an issue with IPv4 in a consumer sense because the device blocking the ICMP is also commonly doing NAT too.
[ Parent | on HN ]