[ipv6hackers] New (or rather updated) IPv6 security related ID - "Further Mitigating Router ND Cache Exhaustion DoS Attacks Using Solicited-Node Group Membership"

Mark ZZZ Smith markzzzsmith at yahoo.com.au
Wed Feb 10 03:47:47 CET 2016


"Further Mitigating Router ND Cache Exhaustion DoS Attacks Using Solicited-Node Group Membership"
https://tools.ietf.org/html/draft-smith-v6ops-mitigate-rtr-dos-mld-slctd-node-01


"Abstract

For each of their IPv6 unicast or anycast addresses, nodes join a
Solicited-Node multicast group, formed using the lower 24 bits of the
address.  This Solicited-Node group membership could be used by
routers to further mitigate a Neighbor Discovery cache Denial of
Service attack."


(please include the gmail email address in any replies, I've switched to it, but am just waiting for the mailing list subscription email to come through. Thanks.)

Regards,
Mark.


More information about the Ipv6hackers mailing list