Limits of stealthing

[Todd MacDermid <tmacd@synacklabs.net>]

With regards to the stealthing section, what do people think are the limits
of what we can push for.

IMO, in an ideal world, all management traffic would take place out
of band. That includes routing table data, active management, SNMP
traps out, everything. The box, to an in-bound perspective, would simply
be a bump in the wire, decrementing TTLs, and silently dropping packets
if they got to zero. (Well, maybe send something back to home base
to look for the routing loop).

I don't think that's going to be possible. The routing protocols currently
run in-band, and thus we've got to address our interfaces. These interfaces
should be configurable to drop packets from all sources that couldn't
legitimately be updating its routing table, and not issue any packets
back to those sources, but that's probably as good as it's going to
get.

Thoughts?

Todd