Correct. All the attacks rely on the fact that the ISATAP router encapsulates/decapsulates a packet the 6to4 relay decapsulates/encapsulates, respectively. So the two tunnels must have the same encapsulation type.
----- Original Message ---- > From: "Templin, Fred L" <fred.l.temp...@boeing.com> > To: Gabi Nakibly <gnaki...@yahoo.com>; v6ops <v6...@ops.ietf.org> > Cc: ipv6@ietf.org; sec...@ietf.org > Sent: Friday, August 28, 2009 7:23:03 PM > Subject: RE: Routing loop attacks using IPv6 tunnels > > Gabi, > > Correct me if I am wrong, but if there were a new version > of ISATAP that did not use ip-proto-41 encapsulation but > instead used a different kind of encapsulation, then it > need not concern itself with routing loop interactions > with 6to4 relays since 6to4 relays only know about > ip-proto-41. Does that match your understanding? > > Thanks - Fred > fred.l.temp...@boeing.com -------------------------------------------------------------------- IETF IPv6 working group mailing list ipv6@ietf.org Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 --------------------------------------------------------------------