[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Proposed 6to4 work (security)




Tim Chown wrote:

On Wed, Oct 16, 2002 at 08:43:51AM +0300, Pekka Savola wrote:

I believe you *can* quite effectively limit the access. First by not advertising 2002::/16 or 192.88.99.1 to your peers (or doing it by some controlled measure, like no-export community), and if it's really important, placing some ACL's.

didn't the same lessons get learnt with smtp relays and abuse, leading to
isp's only allowing their own customers to use their smtp service?  is
there a reason to hope 6to4 could be different

This is different.SMTP relay is part of the expected service from an ISP.
6to4 relay is not. One cannot build a deployment model of 6to4
that assumes that the v4 ISP have deployed a 6to4 relay.

   - Alain.