Re: A small survey of support of IPv6 atomic fragments

2012-01-31 Thread Fernando Gont
On 01/31/2012 10:50 PM, Fernando Gont wrote: >OS | Atomic fragments | Improved Processing > ---+--+-- > FreeBSD 8.2| No | No > FreeBSD 9.0| Yes| No >

A small survey of support of IPv6 atomic fragments

2012-01-31 Thread Fernando Gont
Folks, Since there has been a bit of guesswork regarding what systems support (or do not support) IPv6 atomic fragments, I've played a bit with a few operating systems, and here are the results regarding the support of accepting incoming atomic fragments. The column entitled "Improved Processing"

Re: Fragmentation-related security issues

2012-01-31 Thread Fernando Gont
On 01/31/2012 08:12 AM, Philip Homburg wrote: > "Such traffic absolutely occurs in the wild. I have three reasonably > busy name servers where this is logged as an error from the ipfw code, > e.g." > > Inconclusive. We don't know why that traffic is there. > > So, just remove that requirement fro

Re: Fragmentation-related security issues

2012-01-31 Thread Philip Homburg
In your letter dated Mon, 30 Jan 2012 20:42:27 -0300 you wrote: >On 01/30/2012 06:28 PM, Philip Homburg wrote: >> In your letter dated Sat, 28 Jan 2012 20:41:18 -0300 you wrote: >>> That said, nobody is *introducing* atomic fragments.They should have >>> been supported for more than 15 years, and t