Advisory - tunneling of IP at exchange points.

John Meylor jmeylor at cisco.com
Tue Nov 25 18:19:31 UTC 1997


Paul Thornton wrote:
> 
 We have created
> an advisory which describes details of the vulnerability, and how to
> detect and prevent it.

Paul, well written.  It is important to remember that many
of the exchange points include dedicated multicast routers
which are utilizing GRE or IPinIP tunnels to route multicast
to participating ISPs located on the respective exchange.
Assumung the tunnels are routed appropriatly by prior agreement
these tunnels would fall into the "legitimate" use category
and should not be filtered.

- John



More information about the NANOG mailing list