[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Host-based may be the way to go, but network controls are neccessary

To: Kurt Erik Lindqvist <kurtis@kurtis.pp.se>
Subject: Re: Host-based may be the way to go, but network controls are neccessary
From: Francis Dupont <Francis.Dupont@enst-bretagne.fr>
Date: Fri, 22 Nov 2002 04:02:05 +0100
Cc: Iljitsch van Beijnum <iljitsch@muada.com>, "J. Noel Chiappa" <jnc@ginger.lcs.mit.edu>, multi6@ops.ietf.org
In-reply-to: Your message of Thu, 21 Nov 2002 20:44:51 +0100. <B384E80C-FD89-11D6-B83C-000393AB1404@kurtis.pp.se>

 In your previous mail you wrote:

   Agree. However, addressspace and preventing DDOS are two completely 
   different issues.

=> this is not 100% true: with the 2^64 addresses per link of IPv6,
you open the door to "in prefix" source spoofing, i.e., DDoS,
which defeats ingress filtering (look at the 3041 considered harmful
about the detailed argument).

Regards

Francis.Dupont@enst-bretagne.fr

Follow-Ups:
- Re: Host-based may be the way to go, but network controls are neccessary
  - From: Kurt Erik Lindqvist <kurtis@kurtis.pp.se>

References:
- Re: Host-based may be the way to go, but network controls are neccessary
  - From: Kurt Erik Lindqvist <kurtis@kurtis.pp.se>

Prev by Date: List of IPv6 multihoming drafts
Next by Date: Re: Host-based may be the way to go, but network controls are neccessary
Previous by thread: Re: Host-based may be the way to go, but network controls areneccessary
Next by thread: Re: Host-based may be the way to go, but network controls are neccessary
Index(es):
- Date
- Thread