Subject: Re: [Gen-art] I-D Action:draft-ietf-v6ops-tunnel-loops-03.txt

From: "Joel M. Halpern" <[email-masked]>
Date: Fri, 04 Feb 2011 17:24:13 -0500

These changes do seem to sufficiently address my concern.
Thank you,
Joel

On 2/4/2011 4:15 PM, [email-masked] wrote:
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the IPv6 Operations Working Group of the IETF.
>
>
> 	Title           : Routing Loop Attack using IPv6 Automatic Tunnels: Problem Statement and Proposed Mitigations
> 	Author(s)       : G. Nakibly, F. Templin
> 	Filename        : draft-ietf-v6ops-tunnel-loops-03.txt
> 	Pages           : 14
> 	Date            : 2011-02-04
>
> This document is concerned with security vulnerabilities in IPv6-in-
> IPv4 automatic tunnels.  These vulnerabilities allow an attacker to
> take advantage of inconsistencies between the IPv4 routing state and
> the IPv6 routing state.  The attack forms a routing loop which can be
> abused as a vehicle for traffic amplification to facilitate DoS
> attacks.  The first aim of this document is to inform on this attack
> and its root causes.  The second aim is to present some possible
> mitigation measures.