Am 21.07.26 um 08:40 schrieb forest-relay-contact--- via tor-relays:
Hello.
Marco Moock wrote:
Build an escalation system. E.g. a single IPv6 will be blocked first, if more come from the same /64, the entire /64 is blocked. If more come from the same allocation (either use /48 or even bigger if you can query the BGP data) to block the entire ISP.
The problem with that is that someone with an /80 in that /64 could get everyone else on that /64 blocked, which could be used as a way to target specific people by getting them kicked off their guard.
/64 is the smallest allocation for an ethernet link. The only place where multiple subscribers might be in the same /64 is hosting. For every other case, a /64 is assigned to one customer. -- Gruß Marco Junk-Mail bitte an trashcan@stinkedores.dorfdsl.de