G06.30 Release Version Update Compendium

G06.30 Release Version Update Compendium—543763-001
8-1
8 Networking Products
TCP/IPv6 Subsystem
New Feature
A new option is provided to cause XDCMPReconfigure to deny requests from a remote
host. When this feature is enabled, XDCMPReconfigure does not respond to requests
from the remote host. This new feature works by setting up filters that deny ICMP
packets of type 17 (ICMP_MASKREQ). This feature enhances the security of the
TCP/IPv6 subsystem.
This new feature is disabled by default. (That is, remote requests are accepted). To
enable the feature, you must explicitly enable the ICMP-FILTER-PACKETS parameter
through SCF.
Fallback Alert
If the new TCP/IPv6 feature does not perform correctly, you can disable it (it is disabled
by default) by disabling the ICMP-FILTER-PACKETS parameter through SCF.
Alternatively, you can install the previous version of T1265/T1268, but this requires a
coldload.