Re: [fw-wiz] Off topic: Any one know of a good IPV6 reference book?

From: Crispin Cowan (crispin_at_immunix.com)
Date: 07/30/03

  • Next message: James Hunter: "[fw-wiz] Pix 6.3.1 Lan Based failover" 
    To: "Marcus J. Ranum" <mjr@ranum.com>
Date: Wed, 30 Jul 2003 14:44:58 -0700

    Marcus J. Ranum wrote:

    >>That would solve a lot of issues for secure networks.
    >>
    >>
    >I really believe that IP crypto does not actually solve any
    >significant security problem in a compelling or useful manner.
    >
    If every single packet had an authentic source IP address, then DDoS
    problems would be much easier to manage.

    Caveat: not to say that IPSec or IPv6 are particularly good or bad ways
    to get authentic source IP addresses. Just a counterpoint to MJR's claim.

    Crispin 

    -- 
Crispin Cowan, Ph.D.           http://immunix.com/~crispin/
Chief Scientist, Immunix       http://immunix.com
            http://www.immunix.com/shop/
_______________________________________________
firewall-wizards mailing list
firewall-wizards@honor.icsalabs.com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
  • Next message: James Hunter: "[fw-wiz] Pix 6.3.1 Lan Based failover"