In your previous mail you wrote:
Thank you. That was exactly what my point was.
It's not just the reflector attack; the HAO
nullifies all of the ingress filtering present
on the net right now. That is distinctly worse
than the status quo.
=> if "ingress filtering" is your message is anti-spoofing, I've answered
in a previous mail, so I consider this is the traditional ingress
filtering.
I believe you made a confusion between causes and effects. Ingress
filtering itself as no value, ingress filtering is a reply to
the source address spoofing threat which itself is only an option
to the DDoS threat. So the HAO problem is *only* the reflector attack
in this context (i.e. without anti-spoofing considerations).
Regards
[EMAIL PROTECTED]
PS: we do no progress. After Monday I'll answer only comments to
my draft and threads proposed by the mobile-ip WG chairs.
--------------------------------------------------------------------
IETF IPng Working Group Mailing List
IPng Home Page: http://playground.sun.com/ipng
FTP archive: ftp://playground.sun.com/pub/ipng
Direct all administrative requests to [EMAIL PROTECTED]
--------------------------------------------------------------------
