Re: comment on unmanaged analysis presentation/doc

[itojun@iijlab.net]

>> 	in that case, what is your comment to 6to4 routers?  they accept
>> 	tunnelled packet from anyone, with no authentication whatsoever.
>You mean 6to4 relay (routers)?

	no, 6to4 router for any sites, not just relay routers.

	if a node in 6to4 site A (2002:xxxx:xxxx::/48) tries to talk to a node
	in 6to4 site B (2002:yyyy:yyyy::/48), 6to4 router for site A
	will directly contact 6to4 router for site B.  therefore, any 6to4
	routers will need to accept tunnelled packet from anybody.

>6to4 routers should only accept tunneled packets from their configured
>relay(s).

	if you've done the first sentence, packets from other 6to4 sites will
	get (mistakenly) rejected.

>I think the relays are quite problematic because of this behavior.

	the problem is not just relays, but all 6to4 routers.

itojun