[BEHAVE] Re: [Editorial Errata Reported] RFC5780 (7971)

Christian Huitema <huitema@huitema.net> Sat, 08 June 2024 04:07 UTC

Return-Path: <huitema@huitema.net>
X-Original-To: behave@ietfa.amsl.com
Delivered-To: behave@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C59FC15106C; Fri, 7 Jun 2024 21:07:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level:
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aMawMs1kPxrY; Fri, 7 Jun 2024 21:07:46 -0700 (PDT)
Received: from semfq04.mfg.siteprotect.com (semfq04.mfg.siteprotect.com [64.26.60.185]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E4F0FC15106A; Fri, 7 Jun 2024 21:07:45 -0700 (PDT)
Received: from smtpauth01.mfg.siteprotect.com ([64.26.60.150]) by se04.mfg.siteprotect.com with esmtp (Exim 4.92) (envelope-from <huitema@huitema.net>) id 1sFnMg-0039jM-Lm; Sat, 08 Jun 2024 00:07:41 -0400
Received: from [192.168.1.106] (unknown [172.56.169.249]) (Authenticated sender: huitema@huitema.net) by smtpauth01.mfg.siteprotect.com (Postfix) with ESMTPSA id 4Vx4KG5txzz162Ntn; Sat, 8 Jun 2024 00:07:30 -0400 (EDT)
Message-ID: <6d9a8d1a-4649-449a-a37c-c03096e2dc47@huitema.net>
Date: Fri, 07 Jun 2024 21:07:31 -0700
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: Rebecca VanRheenen <rvanrheenen@amsl.com>, Francesca Palombini <francesca.palombini@ericsson.com>, Zaheduzzaman Sarker <zahed.sarker.ietf@gmail.com>
References: <20240605194616.B8F5EB8FF9@rfcpa.rfc-editor.org> <072367C0-FD0B-460C-9721-3990305260E4@amsl.com>
Content-Language: en-US
From: Christian Huitema <huitema@huitema.net>
Autocrypt: addr=huitema@huitema.net; keydata= xjMEXtavGxYJKwYBBAHaRw8BAQdA1ou9A5MHTP9N3jfsWzlDZ+jPnQkusmc7sfLmWVz1RmvN J0NocmlzdGlhbiBIdWl0ZW1hIDxodWl0ZW1hQGh1aXRlbWEubmV0PsKWBBMWCAA+FiEEw3G4 Nwi4QEpAAXUUELAmqKBYtJQFAl7WrxsCGwMFCQlmAYAFCwkIBwIGFQoJCAsCBBYCAwECHgEC F4AACgkQELAmqKBYtJQbMwD/ebj/qnSbthC/5kD5DxZ/Ip0CGJw5QBz/+fJp3R8iAlsBAMjK r2tmyWyJz0CUkVG24WaR5EAJDvgwDv8h22U6QVkAzjgEXtavGxIKKwYBBAGXVQEFAQEHQJoM 6MUAIqpoqdCIiACiEynZf7nlJg2Eu0pXIhbUGONdAwEIB8J+BBgWCAAmFiEEw3G4Nwi4QEpA AXUUELAmqKBYtJQFAl7WrxsCGwwFCQlmAYAACgkQELAmqKBYtJRm2wD7BzeK5gEXSmBcBf0j BYdSaJcXNzx4yPLbP4GnUMAyl2cBAJzcsR4RkwO4dCRqM9CHpVJCwHtbUDJaa55//E0kp+gH
In-Reply-To: <072367C0-FD0B-460C-9721-3990305260E4@amsl.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Authentication-Results: mfg.siteprotect.com; auth=pass smtp.auth=huitema@huitema.net
X-Originating-IP: 64.26.60.150
X-SpamExperts-Domain: mfg.outbound
X-SpamExperts-Username: 64.26.60.150/31
Authentication-Results: mfg.siteprotect.com; auth=pass smtp.auth=64.26.60.150/31@mfg.outbound
X-SpamExperts-Outgoing-Class: ham
X-SpamExperts-Outgoing-Evidence: Combined (0.17)
X-Recommended-Action: accept
X-Filter-ID: Pt3MvcO5N4iKaDQ5O6lkdGlMVN6RH8bjRMzItlySaT9pNlQ3l18x9wyRPhaOcTdCPUtbdvnXkggZ 3YnVId/Y5jcf0yeVQAvfjHznO7+bT5xNU5/VzyahLV9DIkRJak6VRledVwpgVrHS/I8q+Z4IpQPm I6JFCLKlvlNzVD4KX6sPKYMfE+V8uoWTTKbjYP+NEA790y2r5fFInkd7Dja6vZolWA1CPmBoAjnV hP3dUoOfQN4L9MLJ4JtIzYojQySooTGmivLHW+dXLWlCVdNe8fUaweoUTmxGTU/ZQHLnaH+PZ1ir vTkyJBRQf/lonLG9f+Ivj2YJm8i7DulbPHjKXWTc9smH977GtaomK+sH7IW3r3gYoJcB351fHz5h fLvE1JNN3unpY2zbM2B+JBqu4+gfhaeUJOXJsn8fPw2ryzfvMy2Ipk0vo8E3eSHq8FYkevfvxqJN Ivm0VUGF5/F+kQkADbdFvcBVlhYu7i+f3NwxOYccZRtYo2SgVLN9fkjkcJ0HUNBArK6nQr6g/AWx inqMxuCyXn4R6TLEPny2at/DANVbGR9CQiX+Pv8WLss4qpTS8VU3+lDT7IqS9fkYzPSUPu8L0pve QHL++SL4zDBr/tUy98u1N5xkp01kCnH71/he4cfiGXwGT0XhDD5ccLv7Mh7jkfP346/qSUqdHbBw V76ywZSglUY43T240OB5+bhVEHbmEVcaDK9tNjnVMrjzEzINO9qPGWvsNqX7h/k93SsS4aMXJmiJ 2G0eb5ahhjwlhhEdRLqu3sf8Msp3c+duPwBIU4XP5nDPu5Ea150gr/U0flMcy2Vi/IcBgY4aTIX4 MqJ00EpJRE4KKHUqeqbm1l8NAy9hoSRG51DECq3Mi79jTQjmRNEUwxSuikXcL2gDlBuymrYjBKXa QI6css9Hq72U1G8QONNH/yhypHSzReLzKjAawTxzsBor3ZjIQvjuY9oOniHmEBpKNfFAEwsrPESN YRgNsmGCSbs/Kg8YxXadvsFCddeWLoWJyahtuhAVMuamgwaNowDkYe1GYINKrdD5Yp7RgwCs1BD5 z9yqnoQR0NwQrBXEvroI9km1eLivNXSrq3j69U3TXIqUvF2IFntkkLYxmxVL896YO/pm4zuNRcgR KiGg7nXFaZTxRqjgHyI5YcDX3yDgju4zEin8yWN00qLf8PIsQOb4DzmQhd2T8kDU8ZiwNstUvw4l 0Xx3hgsz+SWXRDtZPpsoQ7Mf8IVhOA8WdkEuNGvk/VqmrPzZuu+ILo3z/l0gnL9HfCuBILYLDdiI +quFItBwvsnnxaGW4j3UiT8Y7DP2CmuPLDXEDp1vnKyV6hnaA2z5ZeJdYg1CC5HxNVYaeQzXUA==
X-Report-Abuse-To: spam@se02.mfg.siteprotect.com
Message-ID-Hash: T3KUVSICG3TRFCCS7FIDS32ZXLON6FNO
X-Message-ID-Hash: T3KUVSICG3TRFCCS7FIDS32ZXLON6FNO
X-MailFrom: huitema@huitema.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-behave.ietf.org-0; header-match-behave.ietf.org-1; header-match-behave.ietf.org-2; header-match-behave.ietf.org-3; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: forestix@nom.one, derek.macdonald@gmail.com, behave@ietf.org, RFC Editor <rfc-editor@rfc-editor.org>
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [BEHAVE] Re: [Editorial Errata Reported] RFC5780 (7971)
List-Id: mailing list of BEHAVE IETF WG <behave.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/behave/HFXU-zOm5c3bBMe1QaCE6QFOpN0>
List-Archive: <https://mailarchive.ietf.org/arch/browse/behave>
List-Help: <mailto:behave-request@ietf.org?subject=help>
List-Owner: <mailto:behave-owner@ietf.org>
List-Post: <mailto:behave@ietf.org>
List-Subscribe: <mailto:behave-join@ietf.org>
List-Unsubscribe: <mailto:behave-leave@ietf.org>

This errata is definitely not editorial. RFC 5780 is an experimental 
RFC, published 14 years ago. Its status is experimental. The authors 
described an experimental mechanism to characterize NAT behavior, using 
the knowledge available at the time. Forest asserts that some of the 
experimental mechanisms in that RFC do no always perform as expected in 
2010. This is not what erratas are for. Since this is an experimental 
RFC, the remedy should be to write a draft that proposes a better 
solution, and have it progress as appropriate.

-- Christian Huitema


On 6/7/2024 11:34 AM, Rebecca VanRheenen wrote:
> Hi Francesca and Zahed,
> 
> We are unable to verify this erratum that the submitter marked as editorial, so we changed the Type to “Technical”. As Stream Approver, please review and set the Status and Type accordingly (see the definitions at https://www.rfc-editor.org/errata-definitions/)
> 
> Note that the behave WG has concluded (as has the Transport Area), so we are sending this to you as ADs of the WIT Area.
> 
> You may review the report at:
> https://www.rfc-editor.org/errata/eid7971
> 
> Information on how to verify errata reports can be found at:
> https://www.rfc-editor.org/how-to-verify/
> 
> Further information on errata can be found at:
> https://www.rfc-editor.org/errata.php
> 
> Thank you.
> 
> RFC Editor/rv
> 
> 
> 
>> On Jun 5, 2024, at 12:46 PM, RFC Errata System <rfc-editor@rfc-editor.org> wrote:
>>
>> The following errata report has been submitted for RFC5780,
>> "NAT Behavior Discovery Using Session Traversal Utilities for NAT (STUN)".
>>
>> --------------------------------------
>> You may review the report below and at:
>> https://www.rfc-editor.org/errata/eid7971
>>
>> --------------------------------------
>> Type: Editorial
>> Reported by: Forest <forestix@nom.one>
>>
>> Section: 4.4
>>
>> Original Text
>> -------------
>> This will also require at most three tests.
>>
>> [...]
>>
>> If
>> the client receives a response, the current behavior is Address-
>> Dependent Filtering; if no response is received, the current behavior
>> is Address and Port-Dependent Filtering.
>>
>> Corrected Text
>> --------------
>> This will require at most four tests.
>>
>> [...]
>>
>> If the client receives a response, the current behavior is
>> Address-Dependent Filtering.
>>
>> If no response is received, test IV must be performed to distinguish
>> between Address and Port-Dependent Filtering and lack of connectivity
>> with the STUN server's alternate address.  For example, a server
>> might be configured with a private OTHER-ADDRESS or reside behind an
>> interfering firewall.  In test IV, the client sends a Binding Request
>> (without a CHANGE-REQUEST attribute) to the alternate address, but
>> primary port.  If the client receives a response, the current
>> behavior is Address and Port-Dependent Filtering; if no response is
>> received, the client knows that it does not have UDP connectivity
>> with the server's alternate address, and therefore cannot use the
>> current server to determine the current filtering behavior.
>>
>> Notes
>> -----
>> I am suggesting this change after encountering several public STUN
>> servers with an OTHER-ADDRESS (or CHANGED-ADDRESS) set to 0.0.0.0,
>> 10.x.x.x, 172.x.x.x, or 192.168.x.x. With such a server, a client
>> following this RFC as currently written (version 08) will incorrectly
>> assume it has discovered Address and Port-Dependent Filtering.
>>
>> I would also note in section 4.5 (Combining and Ordering Tests) that
>> filtering behavior test IV is the same as the mapping behavior test
>> II, allowing them to be combined so long as the filtering tests are
>> done before the mapping tests (to preserve prior NAT state).
>>
>> In support of that ordering, I would ideally have this RFC present
>> the filtering tests before presenting the mapping tests, by swapping
>> section 4.4 with 4.3 and swapping 3.2 with 3.1. This would make
>> things easier for people implementing the spec, as they would
>> intuitively follow the optimal ordering simply by following the RFC's
>> presented order, and would no longer have to mentally reorder the
>> written steps whenever validating or reasoning about their code.
>> Swapping those sections would, of course, affect external references
>> to those section numbers; I don't know if that would too disruptive a
>> change without assigning a new RFC number.
>>
>> Instructions:
>> -------------
>> This erratum is currently posted as "Reported". (If it is spam, it
>> will be removed shortly by the RFC Production Center.) Please
>> use "Reply All" to discuss whether it should be verified or
>> rejected. When a decision is reached, the verifying party
>> will log in to change the status and edit the report, if necessary.
>>
>> --------------------------------------
>> RFC5780 (draft-ietf-behave-nat-behavior-discovery-08)
>> --------------------------------------
>> Title               : NAT Behavior Discovery Using Session Traversal Utilities for NAT (STUN)
>> Publication Date    : May 2010
>> Author(s)           : D. MacDonald, B. Lowekamp
>> Category            : EXPERIMENTAL
>> Source              : Behavior Engineering for Hindrance Avoidance
>> Stream              : IETF
>> Verifying Party     : IESG
>>
> 
> _______________________________________________
> Behave mailing list -- behave@ietf.org
> To unsubscribe send an email to behave-leave@ietf.org