I-D Action: draft-gont-opsec-icmp-ingress-filtering-00.txt
internet-drafts@ietf.org Thu, 28 August 2014 17:38 UTC
Return-Path: <internet-drafts@ietf.org>
X-Original-To: i-d-announce@ietfa.amsl.com
Delivered-To: i-d-announce@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E52021A88B6 for <i-d-announce@ietfa.amsl.com>; Thu, 28 Aug 2014 10:38:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dRXVpdrFexty for <i-d-announce@ietfa.amsl.com>; Thu, 28 Aug 2014 10:38:00 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 338401A886D for <i-d-announce@ietf.org>; Thu, 28 Aug 2014 10:37:47 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Subject: I-D Action: draft-gont-opsec-icmp-ingress-filtering-00.txt
X-Test-IDTracker: no
X-IETF-IDTracker: 5.6.2.p5
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <20140828173747.6623.24712.idtracker@ietfa.amsl.com>
Date: Thu, 28 Aug 2014 10:37:47 -0700
Archived-At: http://mailarchive.ietf.org/arch/msg/i-d-announce/alYRUy3a5tdNArvJDj17KPXV9Q4
X-BeenThere: i-d-announce@ietf.org
X-Mailman-Version: 2.1.15
Reply-To: internet-drafts@ietf.org
List-Id: Internet Draft Announcements only <i-d-announce.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/i-d-announce>, <mailto:i-d-announce-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/i-d-announce/>
List-Post: <mailto:i-d-announce@ietf.org>
List-Help: <mailto:i-d-announce-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/i-d-announce>, <mailto:i-d-announce-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 Aug 2014 17:38:02 -0000
A New Internet-Draft is available from the on-line Internet-Drafts directories.
Title : Network Ingress Filtering: Defeating Attacks which employ Forged ICMP/ ICMPv6 Error Messages
Authors : Fernando Gont
Ray Hunter
Jeroen Massar
Will(Shucheng) Liu
Filename : draft-gont-opsec-icmp-ingress-filtering-00.txt
Pages : 9
Date : 2014-08-28
Abstract:
Over the years, a number of attack vectors that employ forged ICMP/
ICMPv6 error messages have been disclosed and exploited in the wild.
The aforementioned attack vectors do not require that the source
address of the packets be forged, but do require that the addresses
of the IP/IPv6 packet embedded in the ICMP/ICMPv6 payload be forged.
This document discusses a simple, effective, and straightforward
method for using ingress traffic filtering to mitigate attacks that
use forged addresses in the IP/IPv6 packet embedded in an ICMP/ICMPv6
payload. This advice is in line with the recommendations in BCP38.
The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-gont-opsec-icmp-ingress-filtering/
There's also a htmlized version available at:
http://tools.ietf.org/html/draft-gont-opsec-icmp-ingress-filtering-00
Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.
Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/
- I-D Action: draft-gont-opsec-icmp-ingress-filteri… internet-drafts