A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Operational Security Capabilities for IP Network Infrastructure Working Group of the IETF.
Title : Recommendations on Filtering of IPv6 Packets Containing IPv6 Extension Headers
Authors : Fernando Gont
Will(Shucheng) Liu
Ronald P. Bonica
Filename : draft-ietf-opsec-ipv6-eh-filtering-00.txt
Pages : 31
Date : 2015-03-09
Abstract:
It is common operator practice to mitigate security risks by
enforcing appropriate packet filtering. This document analyzes both
the general security implications of IPv6 Extension Headers and the
specific security implications of each Extension Header and Option
type, and provides advice on the filtering of IPv6 packets based on
the IPv6 Extension Headers and the IPv6 options they contain.
Additionally, it discusses the operational and interoperability
implications of discarding packets based on the IPv6 Extension
Headers and IPv6 options they contain.
The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-opsec-ipv6-eh-filtering/
There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-opsec-ipv6-eh-filtering-00
Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.
Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/
_______________________________________________
I-D-Announce mailing list
I-D-Announce@ietf.org
https://www.ietf.org/mailman/listinfo/i-d-announce
Internet-Draft directories: http://www.ietf.org/shadow.html
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt
