mirror of
https://github.com/basecamp/once-campfire.git
synced 2026-08-15 19:40:43 +09:00
9085adcbb3
The local-use NAT64 prefix (64:ff9b:1::/48, RFC 8215) embeds an IPv4 target like the well-known prefix does, but at a deployment-chosen position we can't extract, so block the whole range outright. Also block the IPv6 benchmarking range (2001:2::/48, RFC 5180) to match the IPv4 benchmarking block on 198.18.0.0/15.