Re: [v6ops] Ra-Guard evasion (new Internet-Drafts)

2011-06-08 Thread Carsten Bormann
>> restricting radvd send buffer size to 1452B (that obviously doesn't prevent fragmentation in all cases...) Gruesse, Carsten IETF IPv6 working group mailing list ipv6@ietf.org Administrative Requests: https://www.ietf.org/mai

Re: [v6ops] Ra-Guard evasion (new Internet-Drafts)

2011-06-08 Thread Fernando Gont
Hi, Pekka, On 06/06/2011 07:43 AM, Pekka Savola wrote: >> RA-Guard is not a perfect solution to RA spoofing. It never will >> be. It has limitations (and always will). ND packets that using >> extension headers or fragmentation are just one specific example. > > This has happened with radvd. You