Re: [babel] Comments about rfc7298bis
Juliusz Chroboczek <jch@irif.fr> Wed, 09 May 2018 23:41 UTC
Return-Path: <jch@irif.fr>
X-Original-To: babel@ietfa.amsl.com
Delivered-To: babel@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D5FD9126CF9 for <babel@ietfa.amsl.com>; Wed, 9 May 2018 16:41:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sfVd_CxaZ9hi for <babel@ietfa.amsl.com>; Wed, 9 May 2018 16:41:45 -0700 (PDT)
Received: from korolev.univ-paris7.fr (korolev.univ-paris7.fr [IPv6:2001:660:3301:8000::1:2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7895A12DA41 for <babel@ietf.org>; Wed, 9 May 2018 16:41:45 -0700 (PDT)
Received: from potemkin.univ-paris7.fr (potemkin.univ-paris7.fr [IPv6:2001:660:3301:8000::1:1]) by korolev.univ-paris7.fr (8.14.4/8.14.4/relay1/75695) with ESMTP id w49Nfh2U022446 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 10 May 2018 01:41:43 +0200
Received: from mailhub.math.univ-paris-diderot.fr (mailhub.math.univ-paris-diderot.fr [81.194.30.253]) by potemkin.univ-paris7.fr (8.14.4/8.14.4/relay2/75695) with ESMTP id w49Nfj9H006058; Thu, 10 May 2018 01:41:45 +0200
Received: from mailhub.math.univ-paris-diderot.fr (localhost [127.0.0.1]) by mailhub.math.univ-paris-diderot.fr (Postfix) with ESMTP id 47EE5EB227; Thu, 10 May 2018 01:41:43 +0200 (CEST)
X-Virus-Scanned: amavisd-new at math.univ-paris-diderot.fr
Received: from mailhub.math.univ-paris-diderot.fr ([127.0.0.1]) by mailhub.math.univ-paris-diderot.fr (mailhub.math.univ-paris-diderot.fr [127.0.0.1]) (amavisd-new, port 10023) with ESMTP id Xf1yVYbR8zZ8; Thu, 10 May 2018 01:41:42 +0200 (CEST)
Received: from trurl.irif.fr (unknown [78.194.40.74]) (Authenticated sender: jch) by mailhub.math.univ-paris-diderot.fr (Postfix) with ESMTPSA id 4417CEB226; Thu, 10 May 2018 01:41:42 +0200 (CEST)
Date: Thu, 10 May 2018 01:41:42 +0200
Message-ID: <87sh70wg5l.wl-jch@irif.fr>
From: Juliusz Chroboczek <jch@irif.fr>
To: Denis Ovsienko <denis@ovsienko.info>
Cc: Babel at IETF <babel@ietf.org>
In-Reply-To: <1633cc005b2.fb8883bc31563.5518090263169039684@ovsienko.info>
References: <87fu4huzgj.wl-jch@irif.fr> <1628e298460.cd82970b35329.4945272877112645380@ovsienko.info> <87muyi3eqi.wl-jch@irif.fr> <16296069fec.e13616a29759.8282754479379679955@ovsienko.info> <878ta1y8k0.wl-jch@irif.fr> <87sh7aaqpw.wl-jch@irif.fr> <16322fb2d40.b754c16418709.3274574589997739202@ovsienko.info> <87po2dzntf.wl-jch@irif.fr> <163258f779c.1272194bf35512.5113105590240148496@ovsienko.info> <8736z89zfq.wl-jch@irif.fr> <1632b79a2a7.d0dabacb43120.7322644504922173573@ovsienko.info> <87sh737dci.wl-jch@irif.fr> <1633cc005b2.fb8883bc31563.5518090263169039684@ovsienko.info>
User-Agent: Wanderlust/2.15.9
MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue")
Content-Type: text/plain; charset="US-ASCII"
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.2.7 (korolev.univ-paris7.fr [IPv6:2001:660:3301:8000::1:2]); Thu, 10 May 2018 01:41:43 +0200 (CEST)
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.2.7 (potemkin.univ-paris7.fr [194.254.61.141]); Thu, 10 May 2018 01:41:45 +0200 (CEST)
X-Miltered: at korolev with ID 5AF38737.002 by Joe's j-chkmail (http : // j-chkmail dot ensmp dot fr)!
X-Miltered: at potemkin with ID 5AF38739.000 by Joe's j-chkmail (http : // j-chkmail dot ensmp dot fr)!
X-j-chkmail-Enveloppe: 5AF38737.002 from potemkin.univ-paris7.fr/potemkin.univ-paris7.fr/null/potemkin.univ-paris7.fr/<jch@irif.fr>
X-j-chkmail-Enveloppe: 5AF38739.000 from mailhub.math.univ-paris-diderot.fr/mailhub.math.univ-paris-diderot.fr/null/mailhub.math.univ-paris-diderot.fr/<jch@irif.fr>
X-j-chkmail-Score: MSGID : 5AF38737.002 on korolev.univ-paris7.fr : j-chkmail score : . : R=. U=. O=. B=0.000 -> S=0.000
X-j-chkmail-Score: MSGID : 5AF38739.000 on potemkin.univ-paris7.fr : j-chkmail score : . : R=. U=. O=. B=0.000 -> S=0.000
X-j-chkmail-Status: Ham
X-j-chkmail-Status: Ham
Archived-At: <https://mailarchive.ietf.org/arch/msg/babel/lIKV14o30A0gIxU6r35bUo5N0Rc>
Subject: Re: [babel] Comments about rfc7298bis
X-BeenThere: babel@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "A list for discussion of the Babel Routing Protocol." <babel.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/babel>, <mailto:babel-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/babel/>
List-Post: <mailto:babel@ietf.org>
List-Help: <mailto:babel-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/babel>, <mailto:babel-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 09 May 2018 23:41:48 -0000
Thanks for the explanation, that helps. I'm going to read 7183 when I have time. > Do you see any ways for this to go wrong? Probably not, but I'm not quite comfortable yet. Please be patient, I probably get the details wrong in the following example. Suppose that Chloe has captured a large number of packets previously sent by alice. Alice left the network, and state relevant to Alice has expired at Bob. Now Alice joins the network, and sends A: Hello, TS/PC = 42 Now Chloe sends a replayed packet: C (spoofing A): Update (::/0, 0), TS/PC = 43 Bob sees this as a route announcement from Alice, so he inserts a default route in its route table. Since Alice hasn't sent an IHU yet, the link cost is infinite, so the route doesn't get installed. Bob sends a Hello: B: Hello, TS/PC = 57 and Alice sends an IHU with the correct TS/PC echo: A: IHU(TS/PC=57), TS/PC = 43 the IHU gets ignored, due to the obsolete TS/PC (43), but then Alice resends the IHU: A: IHU(TS/PC=57), TS/PC = 44 This packet is correct, so BOB sets its txcost to something finite, and bang, the route suddenly is selectable, and Bob installs the route that was spoofed by Chloe. What am I missing? -- Juliusz
- [babel] Comments about rfc7298bis Juliusz Chroboczek
- Re: [babel] Comments about rfc7298bis Denis Ovsienko
- Re: [babel] Comments about rfc7298bis Juliusz Chroboczek
- Re: [babel] Comments about rfc7298bis Denis Ovsienko
- Re: [babel] Comments about rfc7298bis Juliusz Chroboczek
- Re: [babel] Comments about rfc7298bis David Schinazi
- Re: [babel] Comments about rfc7298bis Juliusz Chroboczek
- Re: [babel] Comments about rfc7298bis Denis Ovsienko
- Re: [babel] Comments about rfc7298bis Juliusz Chroboczek
- Re: [babel] Comments about rfc7298bis Denis Ovsienko
- Re: [babel] Comments about rfc7298bis Juliusz Chroboczek
- Re: [babel] Comments about rfc7298bis Denis Ovsienko
- Re: [babel] Comments about rfc7298bis Juliusz Chroboczek
- Re: [babel] Comments about rfc7298bis Denis Ovsienko
- Re: [babel] Comments about rfc7298bis Juliusz Chroboczek
- Re: [babel] Comments about rfc7298bis Denis Ovsienko
- Re: [babel] Comments about rfc7298bis Juliusz Chroboczek
- Re: [babel] Comments about rfc7298bis Denis Ovsienko