North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: GRE packets

  • From: Danny McPherson
  • Date: Wed Jun 17 18:29:58 1998

Perhaps to combat this, unless I'm missing something, one could justifiably 
deploy GRE filters with source & destination addresses of the exchange 
subnets.  Filtering GRE in general seems nothing more than foolish.

-danny
[snip] 
(we certainly allow GRE packets and expect everyone else does, too)

> This could kill IP-GRE VPNs indiscriminately.