Re: [v6ops] Question regarding Ra-Guard evasion (ND and extensio headers)

2011-06-13 Thread Ted Lemon
On Jun 13, 2011, at 3:38 PM, Nick Hilliard wrote: dhcpv6 suffers from exactly the same problem. Are there plans to introduce dhcpv6-guard? Nobody's proposed it. IETF IPv6 working group mailing list ipv6@ietf.org

Re: [saag] ITU-T SG17 IPv6 security work items liaison

2011-06-13 Thread Stephen Farrell
Thanks Russ, will make those changes. S. On 14/06/11 00:57, Russ Housley wrote: Stephen: Comments below. Russ From: IETF Security Area To: Study Group 17, Questions 2 and 3 Title: Work on Security of IPv6 FOR ACTION The IETF thanks Study Group 17 for its liaison LS-206 Liaison

Re: [v6ops] Question regarding Ra-Guard evasion (ND and extensio headers)

2011-06-13 Thread Fernando Gont
On 06/13/2011 07:38 PM, Nick Hilliard wrote: On 10/06/2011 22:51, Fernando Gont wrote: * This results in a RA-Guard implementation that is as simple as possible (it only has to look at the header following the fixed IPv6 header). dhcpv6 suffers from exactly the same problem. Agreed. This

Re: [v6ops] Question regarding Ra-Guard evasion (ND and extensio headers)

2011-06-13 Thread Mikael Abrahamsson
On Mon, 13 Jun 2011, Ted Lemon wrote: On Jun 13, 2011, at 3:38 PM, Nick Hilliard wrote: dhcpv6 suffers from exactly the same problem. Are there plans to introduce dhcpv6-guard? Nobody's proposed it. http://tools.ietf.org/html/draft-ietf-savi-dhcp-06 I'd be surprised if implementations

Re: [v6ops] [saag] ITU-T SG17 IPv6 security work items liaison

2011-06-13 Thread Bob Hinden
Russ, On Jun 14, 2011, at 2:57 AM, Russ Housley wrote: Stephen: Comments below. Russ From: IETF Security Area To: Study Group 17, Questions 2 and 3 Title: Work on Security of IPv6 FOR ACTION The IETF thanks Study Group 17 for its liaison LS-206 Liaison on IPv6 security