securing 6bone tunnels

[itojun@iijlab.net]

>>         to avoid attacks, I would like to encourage 6bone tunnel operators
>>         to establish IPv4 transport-mode AH (or IPv6-over-IPv4 tunnel
>>         mode AH) relationship with your peer.  how to do this is implementation
>>         dependent.  for KAME-based platforms, you'd need to get the latest
>>         KAME tree from ftp://ftp.kame.net/pub/kame/snap/ (*BSD releases
>>         do not have enough policy checking code).
>What is the oldest SNAP that has the required policy checking?

	you need a KAME SNAP kit after mar 1 2001 to enforce inbound
	policy checking.

itojun