Session Abstract

As networks make the move to IPv6, existing configurations for network security can't simply be copied over from the IPv4 world. Widely-used firewall and filter configurations will cause serious problems for IPv6, blocking Path MTU Discovery, preventing nameservers from answering queries, and breaking the end-to-end connection model. This presentation explains what needs to be done differently, demonstrates how overzealous filtering causes operational problems, and offers suggestions for finding and fixing them in real-world networks.