Re: a question about tunnels

[Kurt Erik Lindqvist <kurtis@kurtis.pp.se>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

>
>> The question is: what is the behaviour of a host, that doesn't have 
>> any
>> configured tunnel, when it receives a tunneled packet addressed to 
>> him (both
>> destination addresses, inner and outer, are assigned to the host)?
>
> IPv6-in-IPv4 configured tunneling spec,
> draft-ietf-v6ops-mech-v2-02.txt, at least discards them.

So, what you are saying is that IPv4-in-IPv4 and IPv6-in-IPv6 and 
IPv6-in-IPv4 all could behave differently? Wasn't someone to write a 
v6ops security document? Shouldn't this go in there? And aren't we on 
the wrong mailinglist then? :-)

>  And IMHO
> that's what should be done, unless one specifies a specific tunneling
> speudo-interface which is open to the whole world and accepts specific
> kind of packets (a bad idea, I think).

Agreed.

- - kurtis -

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.3

iQA/AwUBQCiIZKarNKXTPFCVEQIXMgCggjcfNfwLAjDViybtBfmI1c6rpaAAoOPa
LzynID5t24dScL1gAhIn8kX9
=4Yfg
-----END PGP SIGNATURE-----