Gabi,

> -----Original Message-----
> From: Gabi Nakibly [mailto:[email protected]]
> Sent: Friday, August 28, 2009 12:07 PM
> To: Templin, Fred L; v6ops
> Cc: [email protected]; [email protected]
> Subject: Re: Routing loop attacks using IPv6 tunnels
> 
> Correct. All the attacks rely on the fact that the ISATAP router
encapsulates/decapsulates a packet
> the 6to4 relay decapsulates/encapsulates, respectively. So the two
tunnels must have the same
> encapsulation type.

OK. That will greatly simplify the checks needed for new
automatic tunneling protocols that have a format other
than ip-proto-41.

Fred
[email protected]

> ----- Original Message ----
> > From: "Templin, Fred L" <[email protected]>
> > To: Gabi Nakibly <[email protected]>; v6ops <[email protected]>
> > Cc: [email protected]; [email protected]
> > Sent: Friday, August 28, 2009 7:23:03 PM
> > Subject: RE: Routing loop attacks using IPv6 tunnels
> >
> > Gabi,
> >
> > Correct me if I am wrong, but if there were a new version
> > of ISATAP that did not use ip-proto-41 encapsulation but
> > instead used a different kind of encapsulation, then it
> > need not concern itself with routing loop interactions
> > with 6to4 relays since 6to4 relays only know about
> > ip-proto-41. Does that match your understanding?
> >
> > Thanks - Fred
> > [email protected]
> 
> 
> 
> 
--------------------------------------------------------------------
IETF IPv6 working group mailing list
[email protected]
Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------

Reply via email to