Subject: [Mip6] Questions on draft-qiu-mip6-mobile-firewall-00.txt

From: [email-masked]
Date: Mon, 28 Feb 2005 14:53:11 -0600

Hello,

I read the draft-qiu-mip6-mobile-firewall-00.txt, and would have few questions. I hope that the authors can clarify me on the following.

The proposed approach is interesting and even though not always applicable, it could be a solution when the visited network deploy MAPs. Section 5 analyzes how the proposed solution solves many of the common issues that firewall can present to the MIPv6 protocol. However it does not seem to describe the procedures when the CN is also a MN. Let's call MN1 the MN in the network where MAPs are deployed, and MN2, its CN.

- Does the MAP allow RRT messages (e.g. HoTI, CoTI) from MN2 to reach MN1? If yes, malicious may use that to flood MN1. MN1 may be in a network where the access link is a scarce and expensive resource (e.g. cellular network) and has to pay for its utilization. Fowarding these RRT messages may cause the MN1 to pay for undesired packets sent by malicious nodes generating RRT packets.

- How does the MAP update the entries when the MN2 uses Route Optimization?

Thank you.

Franck

_______________________________________________
Mip6 mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/mip6