A New Internet-Draft is available from the on-line Internet-Drafts directories.
Title : Security Implications of the Use of IPv6 Extension Headers with IPv6 Neighbor Discovery
Author(s) : Fernando Gont
UK CPNI
Filename : draft-gont-6man-nd-extension-headers-00.txt
Pages : 8
Date : 2011-05-31
IPv6 Extension Headers with Neighbor Discovery messages can be
leveraged to circumvent simple local network protections, such as
"Router Advertisement Guard". Since there is no legitimate use for
IPv6 Extension Headers in Neighbor Discovery messages, and such use
greatly complicates network monitoring and simple security
mitigations such as RA-Guard, this document proposes that hosts
silently ignore Neighbor Discovery messages that use IPv6 Extension
Headers.
A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-gont-6man-nd-extension-headers-00.txt
Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/
This Internet-Draft can be retrieved at:
ftp://ftp.ietf.org/internet-drafts/draft-gont-6man-nd-extension-headers-00.txt
_______________________________________________
I-D-Announce mailing list
I-D-Announce@ietf.org
https://www.ietf.org/mailman/listinfo/i-d-announce
Internet-Draft directories: http://www.ietf.org/shadow.html
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt
