I am seeing thousands of IPS blocked attacks (rule 460 and 461) generated by 2001:470:b:*::1, which is the address of utm. The destinations are my computers also using ipv6. These blocked attacks constitute 98% of the blocked attacks. This was reported in the network protection group in this thread. Is this a bug in the rules or is utm generating bad ICMP packets? (The rules are both broken together, at least there are equal numbers of both attacks.)
HI, they have been reported in the 9.1 beta forum. Until your report they were only being seen on sixxs tunnels. I don't see too many, but they occur each day. I must review the logs and see if they equate to IPv6 traffic over the tunnel. The sixxs packets are coming from the far end which in my case and the other person who reported it is the London IPv6 POP.
HI, they have been reported in the 9.1 beta forum. Until your report they were only being seen on sixxs tunnels. I don't see too many, but they occur each day. I must review the logs and see if they equate to IPv6 traffic over the tunnel. The sixxs packets are coming from the far end which in my case and the other person who reported it is the London IPv6 POP.
