Re: Advisory - tunneling of IP at exchange points.

Paul Thornton wrote:

We have created

an advisory which describes details of the vulnerability, and how to detect and prevent it.

Paul, well written. It is important to remember that many of the exchange points include dedicated multicast routers which are utilizing GRE or IPinIP tunnels to route multicast to participating ISPs located on the respective exchange. Assumung the tunnels are routed appropriatly by prior agreement these tunnels would fall into the "legitimate" use category and should not be filtered. - John