[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: 6to4 security questions

To: Brian E Carpenter <brian@hursley.ibm.com>
Subject: Re: 6to4 security questions
From: Alain Durand <Alain.Durand@Sun.COM>
Date: Wed, 20 Nov 2002 11:15:52 -0800
Cc: Pekka Savola <pekkas@netcore.fi>, v6ops@ops.ietf.org
Delivery-date: Wed, 20 Nov 2002 11:16:07 -0800
Envelope-to: v6ops-data@psg.com
References: <Pine.LNX.4.44.0211201923500.12074-100000@netcore.fi><3DDBDA36.FD94C495@hursley.ibm.com>
Sender: owner-v6ops@ops.ietf.org
User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.0.1)Gecko/20020823 Netscape/7.0


Brian E Carpenter wrote:

Pekka,

My fundamental question since the 6to4 spoofing issue was first raised is whether this exposure to spoofing is a *significant*
addition to the generic exposure. If you were a spoofer, would
you really bother spoofing 6to4 rather than just plain spoofing?

IPv4 ingress filtering is an answer to IPv4 spoofing.
IPv6 ingress filtering is an answer to IPv6 spoofing

The 6to4 relay architecture enable an IPv4 attacker to bypass
IPv4 and IPv6 ingress filtering to bring down an IPv6 host.

   - Alain.

Follow-Ups:
- Re: 6to4 security questions
  - From: Brian E Carpenter <brian@hursley.ibm.com>

References:
- 6to4 security questions
  - From: Pekka Savola <pekkas@netcore.fi>
- Re: 6to4 security questions
  - From: Brian E Carpenter <brian@hursley.ibm.com>

Prev by Date: Re: 6to4 security questions
Next by Date: RE: 6to4 security questions
Previous by thread: Re: 6to4 security questions
Next by thread: Re: 6to4 security questions
Index(es):
- Date
- Thread