Using IPv6 with prefixes shorter than a /64 on a LAN

• Previous message (by thread): Using IPv6 with prefixes shorter than a /64 on a LAN
• Next message (by thread): Using IPv6 with prefixes shorter than a /64 on a LAN
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On 24/01/2011 09:46 p.m., Owen DeLong wrote:

>>> Many cite concerns of potential DoS attacks by doing sweeps of
>>> IPv6 networks.  I don't think this will be a common or
>>> wide-spread problem.
>> 
>> Myopia doesn't make the problem go away.  The point of such an
>> attack is not to "find things", but to overload the router(s).
>> (which can be done rather easily by a few dozen machines.)
>> 
> Only if you don't deploy reasonable mitigation strategies.

Just wondering: What would you deem as "reasonable mitigation strategies"?

Thanks,
-- 
Fernando Gont
e-mail: fernando at gont.com.ar || fgont at acm.org
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1

• Previous message (by thread): Using IPv6 with prefixes shorter than a /64 on a LAN
• Next message (by thread): Using IPv6 with prefixes shorter than a /64 on a LAN
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]