IPv6 Type 0 Routing Header issues

Jeroen Massar <jeroen@unfix.org> Mon, 23 April 2007 23:53 UTC

Return-path: <ipv6-bounces@ietf.org>
Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1Hg8Lz-0004Ic-9R; Mon, 23 Apr 2007 19:53:55 -0400
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Hg8Lx-0004CM-F2 for ipv6@ietf.org; Mon, 23 Apr 2007 19:53:53 -0400
Received: from purgatory.unfix.org ([2001:7b8:20d:0:290:27ff:fe24:c19f]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Hg8Lu-00032L-0N for ipv6@ietf.org; Mon, 23 Apr 2007 19:53:53 -0400
Received: from [IPv6:2001:770:100:9e::2] (cl-159.dub-01.ie.sixxs.net [IPv6:2001:770:100:9e::2]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jeroen) by purgatory.unfix.org (Postfix) with ESMTP id 5D56F140C1E5; Tue, 24 Apr 2007 01:53:48 +0200 (CEST)
Message-ID: <462D4706.4000504@spaghetti.zurich.ibm.com>
Date: Tue, 24 Apr 2007 00:53:42 +0100
From: Jeroen Massar <jeroen@unfix.org>
Organization: Unfix
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070221 Thunderbird/1.5.0.10 Mnenhy/0.7.5.666
MIME-Version: 1.0
To: ipv6@ietf.org, v6ops@ops.ietf.org, IPv6 Ops list <ipv6-ops@lists.cluenet.de>
X-Enigmail-Version: 0.94.3.0
OpenPGP: id=333E7C23
X-Virus-Scanned: ClamAV 0.90.1/3152/Tue Apr 24 00:34:59 2007 on purgatory.unfix.org
X-Virus-Status: Clean
X-Spam-Score: -2.8 (--)
X-Scan-Signature: 4d87d2aa806f79fed918a62e834505ca
Cc:
Subject: IPv6 Type 0 Routing Header issues
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "IP Version 6 Working Group \(ipv6\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============2115204074=="
Errors-To: ipv6-bounces@ietf.org

Just in case folks are missing out on this, find below a rather nasty
security issue.

Please use "IPv6 Ops list <ipv6-ops@lists.cluenet.de>" for discussion,
see also: http://lists.cluenet.de/pipermail/ipv6-ops/

Greets,
 Jeroen

-------- Original Message --------
Subject: [dns-operations] IPv6 Type 0 Routing Header issues
Date: Mon, 23 Apr 2007 17:07:57 +0200
From: Nicolas FISCHBACH <nicolist@securite.org>
To: dns-operations@lists.oarci.net

Very interesting presentation by Arnaud and Phil:

http://www.secdev.org/conf/IPv6_RH_security-csw07.pdf

If you only care about the DNS related bits, start on page 29.

Nico.
-- 
Nicolas FISCHBACH
Senior Manager - Network Engineering/Security - COLT Telecom
e:(nico@securite.org) w:<http://www.securite.org/nico/>




--------------------------------------------------------------------
IETF IPv6 working group mailing list
ipv6@ietf.org
Administrative Requests: https://www1.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------