Re: [j-nsp] Re : IPv6 Routing Headers

2007-04-26 Thread Eli Dart
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pekka Savola wrote: On Wed, 25 Apr 2007, Eli Dart wrote: Just for the record, a loopback filter does not stop transit traffic, even if the transit traffic is processed on the RE. (I tested it today). Which transit traffic is processed on the

Re: [j-nsp] Re : IPv6 Routing Headers

2007-04-24 Thread Daniel Lete
Now, maybe I am too innocent, but believe Kevin's original mail does cover the vulnerability. As far as I can see both filters below would stop the vulnerability. There is not the functionality of blocking Type 0, Type 1 or Type 2, but supposely any of them is either not used or dangerous.