Folks, This rev is meant to address your feedback regarding opt 0x23 (draft-ietf-roll-useofrplinfo).
Please do let us know if your concerns have been addressed. Thanks! Cheers, Fernando On 03/05/2018 08:31 PM, [email protected] wrote: > > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the Operational Security Capabilities for IP > Network Infrastructure WG of the IETF. > > Title : Recommendations on the Filtering of IPv6 Packets > Containing IPv6 Extension Headers > Authors : Fernando Gont > Will(Shucheng) Liu > Filename : draft-ietf-opsec-ipv6-eh-filtering-05.txt > Pages : 35 > Date : 2018-03-05 > > Abstract: > It is common operator practice to mitigate security risks by > enforcing appropriate packet filtering. This document analyzes both > the general security implications of IPv6 Extension Headers and the > specific security implications of each Extension Header and Option > type. Additionally, it discusses the operational and > interoperability implications of discarding packets based on the IPv6 > Extension Headers and IPv6 options they contain. Finally, it > provides advice on the filtering of such IPv6 packets at transit > routers for traffic *not* directed to them, for those cases in which > such filtering is deemed as necessary. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-opsec-ipv6-eh-filtering/ > > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-opsec-ipv6-eh-filtering-05 > https://datatracker.ietf.org/doc/html/draft-ietf-opsec-ipv6-eh-filtering-05 > > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=draft-ietf-opsec-ipv6-eh-filtering-05 > > > Please note that it may take a couple of minutes from the time of submission > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > OPSEC mailing list > [email protected] > https://www.ietf.org/mailman/listinfo/opsec > -- Fernando Gont SI6 Networks e-mail: [email protected] PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 _______________________________________________ OPSEC mailing list [email protected] https://www.ietf.org/mailman/listinfo/opsec
