Subject: Fw: New Version Notification for draft-smith-6man-mitigate-nd-cache-dos-slnd-00.txt

From: Mark ZZZ Smith <[email-masked]>
Date: Sat, 6 Oct 2012 17:49:46 -0700 (PDT)

Hi,

I'd be interested if people think the idea has merit, and is worth putting more time into.

Thanks very much,
Mark.

----- Forwarded Message -----
> From: "[email-masked]" <[email-masked]>
> To: [email-masked]
> Cc: 
> Sent: Sunday, 7 October 2012 11:41 AM
> Subject: New Version Notification for draft-smith-6man-mitigate-nd-cache-dos-slnd-00.txt
> 
> 
> A new version of I-D, draft-smith-6man-mitigate-nd-cache-dos-slnd-00.txt
> has been successfully submitted by Mark Smith and posted to the
> IETF repository.
> 
> Filename:     draft-smith-6man-mitigate-nd-cache-dos-slnd
> Revision:     00
> Title:         Mitigating IPv6 Router Neighbor Cache DoS Using Stateless 
> Neighbor Discovery
> Creation date:     2012-10-07
> WG ID:         Individual Submission
> Number of pages: 9
> URL:            
> http://www.ietf.org/internet-drafts/draft-smith-6man-mitigate-nd-cache-dos-slnd-00.txt
> Status:          
> http://datatracker.ietf.org/doc/draft-smith-6man-mitigate-nd-cache-dos-slnd
> Htmlized:        
> http://tools.ietf.org/html/draft-smith-6man-mitigate-nd-cache-dos-slnd-00
> 
> 
> Abstract:
>    The IPv6 neighbor discovery cache is vulernable to a Denial of
>    Service attack that purposely exhausts the state used during the
>    neighbor discovery address resolution process.  This can be very
>    disruptive when a router is successfully attacked.
> 
>    This memo proposes a stateless form of neighbor discovery to be used
>    by routers to eliminate the opportunity for this DoS attack.  This
>    method of stateless neighbor discovery would be used for unknown or
>    untrusted packet sources, when the router's neighbor cache's state
>    capacity reaches a medium to high threshold of use.  Trusted packet
>    sources would continue to be provided with traditional stateful
>    neighbor discovery.
> 
>                                                                                 
>   
> 
> 
> The IETF Secretariat
>