[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: I-D Action:draft-ietf-v6ops-cpe-simple-security-08.txt



On Oct 19, 2009, at 21:36, Cameron Byrne wrote:

1.  I could not find the specific recommendation for disallowing
spoofed traffic by beans of uRPF like in RFC 3704

I suppose the draft would be improved by an explicit reference to reverse path forwarding and a cite to RFC 3704.


2.  Is management outside of scope?  For example, does  it make sense
to say that the WAN interface is by default not interface to be used
for management

That's a security consideration, so I'd say it would be in scope and a worthy point to mention. I'll update.


--
james woodyatt <jhw@apple.com>
member of technical staff, communications engineering