>>>>> On Wed, 21 Feb 2001 14:52:55 +0200, 
>>>>> Markku Savela <[EMAIL PROTECTED]> said:

> I would like get clarification to section 5.5.3 (e): what is supposed
> to happen with the preferred lifetime? Do the two hour checks apply to
> it too? [if not, then DOS can force all addresses into deprecated
> state].

I don't think so.  Section 5.5.4. of RFC 2462 says
   A deprecated address SHOULD continue to be used as a source
   address in existing communications, but SHOULD NOT be used in new
   communications if an alternate (non-deprecated) address is available
   and has sufficient scope.

Thus, even if all addresses become deprecated, you can still use all
the addresses as the source address for a new communication, because
there's no other non-deprecated addresses.

I admit the "two-hour" rule is not a complete solution against all
types of DOS attack, though.

                                        JINMEI, Tatuya
                                        Communication Platform Lab.
                                        Corporate R&D Center, Toshiba Corp.
                                        [EMAIL PROTECTED]
--------------------------------------------------------------------
IETF IPng Working Group Mailing List
IPng Home Page:                      http://playground.sun.com/ipng
FTP archive:                      ftp://playground.sun.com/pub/ipng
Direct all administrative requests to [EMAIL PROTECTED]
--------------------------------------------------------------------

Reply via email to