nanog mailing list archives

Re: IPv6, IPSEC and DoS


From: Iljitsch van Beijnum <iljitsch () muada com>
Date: Sat, 1 Jan 2005 12:16:02 +0100


On 1-jan-05, at 2:22, J. Oquendo wrote:

Supposedly the vulns associated with IPv6 are: reconnaissance, unauth'd
access, layers 3-4 spoofing, ARP and DHCP attacks, smurfs, routing
attacks, viruses andworms, translations, transistions, and tunneling
mechanisms. According to Sean Covery's IPv6 Security Threats
(http://www.seanconvery.com/SEC-2003.pdf)

No, that list is just a starting point for the discussion. A lot of stuff in the list doesn't amount to anything. (For instance, there is no ARP in IPv6.)

I don't understand your example, BTW.

But as long as people get to snif your packets, you're dead in the water unless you use IPsec.


Current thread: