Re: [v6ops] Revised I-D: Advice on RA-Guard Implementation

[Philip Homburg <[e-mail]>]

In your letter dated Sun, 08 Jan 2012 23:14:23 -0300 you wrote:
>The idea is that if that non-first fragments are always forwarded,
>whereas first-fragments are blocked if:
>
>a) We've found that what follows the fragment header is an RA packet, or,
>
>b) this is a first-fragment, and it is missing upper-layer protocol
>information.

In theory (when it comes to RA or other ND packets) it should be secure to
let the fragment through if the hop count is not equal to 255.