Hi, Here's a new version of my stateless neighbor discovery draft. Changes:
- make it more obvious that hosts don't need to be changed - more informative introduction/problem definition text - allow low end/embedded platforms to consider all traffic sources untrusted if a DoS attack is occurring - misc. text re-wordings and changes Thanks to Ray Hunter and Matthew Moyle-Croft for their reviews and comments. Comments most appreciated. Thanks, Mark. ----- Forwarded Message ----- > From: "internet-dra...@ietf.org" <internet-dra...@ietf.org> > To: markzzzsm...@yahoo.com.au > Cc: > Sent: Saturday, 13 October 2012 11:49 AM > Subject: New Version Notification for > draft-smith-6man-mitigate-nd-cache-dos-slnd-01.txt > > > A new version of I-D, draft-smith-6man-mitigate-nd-cache-dos-slnd-01.txt > has been successfully submitted by Mark Smith and posted to the > IETF repository. > > Filename: draft-smith-6man-mitigate-nd-cache-dos-slnd > Revision: 01 > Title: Mitigating IPv6 Router Neighbor Cache DoS Using Stateless > Neighbor Discovery > Creation date: 2012-10-13 > WG ID: Individual Submission > Number of pages: 11 > URL: > http://www.ietf.org/internet-drafts/draft-smith-6man-mitigate-nd-cache-dos-slnd-01.txt > Status: > http://datatracker.ietf.org/doc/draft-smith-6man-mitigate-nd-cache-dos-slnd > Htmlized: > http://tools.ietf.org/html/draft-smith-6man-mitigate-nd-cache-dos-slnd-01 > Diff: > http://www.ietf.org/rfcdiff?url2=draft-smith-6man-mitigate-nd-cache-dos-slnd-01 > > Abstract: > The IPv6 neighbor discovery cache is vulnerable to a Denial of > Service attack that purposely exhausts the state used during the > neighbor discovery address resolution process. This attack can be > very disruptive when the target is a router. This memo proposes a > stateless form of neighbor discovery to be used by routers to > mitigate this attack. It does not require any changes to hosts. > > > > > > > The IETF Secretariat > -------------------------------------------------------------------- IETF IPv6 working group mailing list ipv6@ietf.org Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 --------------------------------------------------------------------
