Correct. All the attacks rely on the fact that the ISATAP router 
encapsulates/decapsulates a packet the 6to4 relay decapsulates/encapsulates, 
respectively. So the two tunnels must have the same encapsulation type.

----- Original Message ----
> From: "Templin, Fred L" <fred.l.temp...@boeing.com>
> To: Gabi Nakibly <gnaki...@yahoo.com>; v6ops <v6...@ops.ietf.org>
> Cc: ipv6@ietf.org; sec...@ietf.org
> Sent: Friday, August 28, 2009 7:23:03 PM
> Subject: RE: Routing loop attacks using IPv6 tunnels
> 
> Gabi,
> 
> Correct me if I am wrong, but if there were a new version
> of ISATAP that did not use ip-proto-41 encapsulation but
> instead used a different kind of encapsulation, then it
> need not concern itself with routing loop interactions
> with 6to4 relays since 6to4 relays only know about
> ip-proto-41. Does that match your understanding? 
> 
> Thanks - Fred
> fred.l.temp...@boeing.com



      
--------------------------------------------------------------------
IETF IPv6 working group mailing list
ipv6@ietf.org
Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------

Reply via email to