Re: Advisory - tunneling of IP at exchange points.

[John Meylor <jmeylor () cisco com>]

Paul Thornton wrote:
>
 We have created
> an advisory which describes details of the vulnerability, and how to
> detect and prevent it.

Paul, well written.  It is important to remember that many
of the exchange points include dedicated multicast routers
which are utilizing GRE or IPinIP tunnels to route multicast
to participating ISPs located on the respective exchange.
Assumung the tunnels are routed appropriatly by prior agreement
these tunnels would fall into the "legitimate" use category
and should not be filtered.

- John