[ipv6hackers] RA guard evasion

[Fernando Gont]

On 05/14/2013 07:55 AM, Eric Vyncke (evyncke) wrote:
> 
> As indicated by some of your readers, 'undetermined-transport' can
> help you and BTW, do not fear too much to drop legit packets as we
> still have to find such a legit packet with this weird fragmentation.
> I would even go further and, when undetermined-transport is not
> available, then dropping all fragments could be the last resort (and
> then I am afraid that you may drop some legit traffic -- yet to be
> seen though as MSS rules nowadays).

FWIW, this is relevant for this discussion:
<http://tools.ietf.org/id/oversized-header-chain>

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont at si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492