[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: comment on unmanaged analysis presentation/doc
>> in that case, what is your comment to 6to4 routers? they accept
>> tunnelled packet from anyone, with no authentication whatsoever.
>You mean 6to4 relay (routers)?
no, 6to4 router for any sites, not just relay routers.
if a node in 6to4 site A (2002:xxxx:xxxx::/48) tries to talk to a node
in 6to4 site B (2002:yyyy:yyyy::/48), 6to4 router for site A
will directly contact 6to4 router for site B. therefore, any 6to4
routers will need to accept tunnelled packet from anybody.
>6to4 routers should only accept tunneled packets from their configured
if you've done the first sentence, packets from other 6to4 sites will
get (mistakenly) rejected.
>I think the relays are quite problematic because of this behavior.
the problem is not just relays, but all 6to4 routers.