Re: [v6ops] Ra-Guard evasion (new Internet-Drafts)

2011-06-08 Thread Carsten Bormann
>> restricting radvd send buffer size to 1452B (that obviously doesn't prevent fragmentation in all cases...) Gruesse, Carsten IETF IPv6 working group mailing list ipv6@ietf.org Administrative Requests: https://www.ietf.org/mai

Re: [v6ops] Ra-Guard evasion (new Internet-Drafts)

2011-06-08 Thread Fernando Gont
Hi, Pekka, On 06/06/2011 07:43 AM, Pekka Savola wrote: >> RA-Guard is not a perfect solution to RA spoofing. It never will >> be. It has limitations (and always will). ND packets that using >> extension headers or fragmentation are just one specific example. > > This has happened with radvd. You

Re: Ra-Guard evasion (new Internet-Drafts)

2011-06-01 Thread Karl Auer
On Wed, 2011-06-01 at 14:20 -0300, Fernando Gont wrote: > * "IPv6 Router Advertisement Guard (RA-Guard) Evasion", available at: > http://tools.ietf.org/id/draft-gont-v6ops-ra-guard-evasion-00.txt Section 1, second para: "of identifying" should be "to identify" Section 1, third para: "had so far b