RE: Security considerations of the ICMPv6 draft

2005-05-02 Thread Mukesh . K . Gupta
> Sent: Friday, April 22, 2005 2:49 PM > To: Gupta Mukesh.K (Nokia-NET/MtView); [EMAIL PROTECTED] > Cc: ipv6@ietf.org > Subject: RE: Security considerations of the ICMPv6 draft > > > At 13:41 20/04/2005 -0500, [EMAIL PROTECTED] wrote: > > > > * I have not read t

RE: Security considerations of the ICMPv6 draft

2005-04-22 Thread Fernando Gont
At 13:41 20/04/2005 -0500, [EMAIL PROTECTED] wrote: > * I have not read the latsts update of the IPsec specs. Do > they know state > it clearly that if you're using IPsec, you should drop those > ICMP messages > that arrive without IPsec authentication? (If not, IPsec won't help). The new IPsec Sec

RE: Security considerations of the ICMPv6 draft

2005-04-20 Thread Mukesh . K . Gupta
Fernando, > A few comments on this text: > > * I have not read the latsts update of the IPsec specs. Do > they know state > it clearly that if you're using IPsec, you should drop those > ICMP messages > that arrive without IPsec authentication? (If not, IPsec won't help). The new IPsec Secur

RE: Security considerations of the ICMPv6 draft

2005-04-19 Thread Fernando Gont
At 14:35 13/04/2005 -0500, [EMAIL PROTECTED] wrote: === 6. As the ICMP messages are passed to the upper-layer processes, it is possible to perform attacks on the upper layer protocols (e.g., TCP) with ICMP [TCP-attack]. Protecting the upper layer with IPsec mitigates this

RE: Security considerations of the ICMPv6 draft

2005-04-13 Thread Mukesh . K . Gupta
f.org > Subject: RE: Security considerations of the ICMPv6 draft > > > At 13:57 11/04/2005 -0500, [EMAIL PROTECTED] wrote: > > >I agree that we should add some words to raise awareness > >about the ICMP-based attacks. We could add the text that > >Pekka sug

RE: Security considerations of the ICMPv6 draft

2005-04-13 Thread Fernando Gont
At 13:57 11/04/2005 -0500, [EMAIL PROTECTED] wrote: I agree that we should add some words to raise awareness about the ICMP-based attacks. We could add the text that Pekka suggested in the security consideration section and provide an informative reference to your draft. That'd be a good thing. I

Re: Security considerations of the ICMPv6 draft

2005-04-11 Thread Brian Haberman
Hi Mukesh, On Apr 11, 2005, at 14:57, [EMAIL PROTECTED] wrote: Fernando, I agree that we should add some words to raise awareness about the ICMP-based attacks. We could add the text that Pekka suggested in the security consideration section and provide an informative reference to your draft. Sound

RE: Security considerations of the ICMPv6 draft

2005-04-11 Thread Mukesh . K . Gupta
- > From: ext Fernando Gont [mailto:[EMAIL PROTECTED] > Sent: Sunday, April 10, 2005 9:35 PM > To: Pekka Savola > Cc: ipv6@ietf.org; Gupta Mukesh.K (Nokia-NET/MtView) > Subject: Re: Security considerations of the ICMPv6 draft > > > At 02:24 09/04/2005 +0300, Pekka Savola

Re: Security considerations of the ICMPv6 draft

2005-04-10 Thread Fernando Gont
At 02:24 09/04/2005 +0300, Pekka Savola wrote: I think the ICMPv6 draft should add some words to raise awareness about ICMP-based attacks that can be performed against transport protocols. Any text suggestions -- just to have an idea how verbose and explicit you're looking at; did you refer to th

Re: Security considerations of the ICMPv6 draft

2005-04-08 Thread Pekka Savola
On Fri, 8 Apr 2005, Fernando Gont wrote: I think the ICMPv6 draft should add some words to raise awareness about ICMP-based attacks that can be performed against transport protocols. Any text suggestions -- just to have an idea how verbose and explicit you're looking at; did you refer to the prop

RE: Security considerations of the ICMPv6 draft

2005-04-08 Thread Elwyn davies
o: ipv6@ietf.org > Cc: [EMAIL PROTECTED] > Subject: Security considerations of the ICMPv6 draft > > Folks, > > I sent some comments off-list to Mukesh, and he suggested to raise them on > the list. > > I think the ICMPv6 draft should add some words to raise awareness about > I

Security considerations of the ICMPv6 draft

2005-04-08 Thread Fernando Gont
Folks, I sent some comments off-list to Mukesh, and he suggested to raise them on the list. I think the ICMPv6 draft should add some words to raise awareness about ICMP-based attacks that can be performed against transport protocols. For example, the current draft suggest IPsec, or no checks at