[LAC-TF] [LACNIC/Seguridad] [v6ops] I-D Action: draft-ietf-v6ops-ra-guard-implementation-00.txt

Arturo Servin aservin at lacnic.net
Tue Feb 14 09:57:47 BRST 2012


	Excelente, Fernando, felicidades.

	Ahora esperemos que el RFC no tenga muchas barreras.

Slds,
.as

On 14 Feb 2012, at 01:10, Fernando Gont wrote:

> FYI, recientemente aceptado por el v6ops wg.
> 
> Mis agradecimientos a Arturo Servin, quien hizo mucho por este trabajo.
> Desde enviar feedback, hasta presentarlo en IETF 81.
> 
> Saludos,
> Fernando
> 
> 
> 
> 
> -------- Original Message --------
> Subject: [v6ops] I-D Action: draft-ietf-v6ops-ra-guard-implementation-00.txt
> Date: Mon, 13 Feb 2012 10:08:07 -0800
> From: internet-drafts at ietf.org
> To: i-d-announce at ietf.org
> CC: v6ops at ietf.org
> 
> 
> A New Internet-Draft is available from the on-line Internet-Drafts
> directories. This draft is a work item of the IPv6 Operations Working
> Group of the IETF.
> 
> 	Title           : Implementation Advice for IPv6 Router Advertisement
> Guard (RA-Guard)
> 	Author(s)       : Fernando Gont
> 	Filename        : draft-ietf-v6ops-ra-guard-implementation-00.txt
> 	Pages           : 16
> 	Date            : 2012-02-12
> 
>   The IPv6 Router Advertisement Guard (RA-Guard) mechanism is commonly
>   employed to mitigate attack vectors based on forged ICMPv6 Router
>   Advertisement messages.  Many existing IPv6 deployments rely on RA-
>   Guard as the first line of defense against the aforementioned attack
>   vectors.  However, some implementations of RA-Guard have been found
>   to be prone to circumvention by employing IPv6 Extension Headers.
>   This document describes the evasion techniques that affect the
>   aforementioned implementations, and provides advice on the
>   implementation of RA-Guard, such that the RA-Guard evasion vectors
>   are eliminated.
> 
> 
> A URL for this Internet-Draft is:
> http://www.ietf.org/internet-drafts/draft-ietf-v6ops-ra-guard-implementation-00.txt
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
> 
> This Internet-Draft can be retrieved at:
> ftp://ftp.ietf.org/internet-drafts/draft-ietf-v6ops-ra-guard-implementation-00.txt
> 
> _______________________________________________
> v6ops mailing list
> v6ops at ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops
> 
> _______________________________________________
> LACTF mailing list
> lactf at lac.ipv6tf.org
> https://mail.lacnic.net/mailman/listinfo/lactf




More information about the LACTF mailing list