[c-nsp] no ipv6 source-route

Gert Doering gert at greenie.muc.de
Tue Apr 24 17:59:01 EDT 2007


Hi,

On Tue, Apr 24, 2007 at 09:14:19PM +0300, Saku Ytti wrote:
> > Ugh and groan!
> 
> Even if it would be supported, wouldn't it still mean that all packets
> source-route packets reach MSFC. And while it would stop this feature
> from working, it would still leave the DoS vector open?

That's what we have hardware rate limiters for... :)

gert

-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de


More information about the cisco-nsp mailing list