Re: is it rational to close the 139 port
Claudius Hubig a écrit :
>
> While it is technically possible to block these requests for IPv4,
> you should never block ICMPv6, since it is necessary to do SLAAC.
Not only SLAAC (which is optional) but also neighbour discovery, which
is mandatory in most cases on a shared medium such as ethernet as it
plays a similar role as ARP does for IPv4. However only a few ICMPv6
types are used by neighbour discovery, and echo request/reply are not
part of them. Namely :
neighbour solicitation
neighbour advertisement
router solicitation
router advertisement
Reply to: