Re: [BEHAVE] NAT Logging -- Port violation event for MAP-E or LW4over6 BR

Tom Taylor <tom.taylor.stds@gmail.com> Fri, 26 April 2013 15:46 UTC

Return-Path: <tom.taylor.stds@gmail.com>
X-Original-To: behave@ietfa.amsl.com
Delivered-To: behave@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 830C421F99F1 for <behave@ietfa.amsl.com>; Fri, 26 Apr 2013 08:46:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z0WM2p376+sk for <behave@ietfa.amsl.com>; Fri, 26 Apr 2013 08:46:21 -0700 (PDT)
Received: from mail-ia0-x22f.google.com (mail-ia0-x22f.google.com [IPv6:2607:f8b0:4001:c02::22f]) by ietfa.amsl.com (Postfix) with ESMTP id 90EF521F99E7 for <behave@ietf.org>; Fri, 26 Apr 2013 08:46:21 -0700 (PDT)
Received: by mail-ia0-f175.google.com with SMTP id i38so3748240iae.6 for <behave@ietf.org>; Fri, 26 Apr 2013 08:46:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:user-agent:mime-version:to:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=zZNm6mnWp/K23y5I1U5kg01My0HdFd1bTCkd9fEX1T0=; b=ezyLs54VNqo7rT9bmddC7mLoHNIysjuU7sXnnR/AguJFXYCHI0sSiPeGOA5Pawn9zV 20eZLlk3MUQ8a4qsYXFoZVJGOwqkVyMVq8kiVAcPuN07dwftxgaogyiJclCF92FQiLvP PnAMEs37j3HdD0HCOIJzUkpZl1euT2xPdaPZnLHMTUK+Ghz//WlETy+b906o90vnQwXt ElIij+pCRjBAKEfOaQ8QaPZ9z1t5fuU6GELlIAN+NbZs7re7xEUufDdxR2iX01zE0vLy tfBdIE4TneGljJtFbEpuhr/fD8erR4GYoqwjgpX51QO5jTiOFls1m/DP79OVPS3eIiA5 yD3Q==
X-Received: by 10.50.50.8 with SMTP id y8mr2271634ign.55.1366991181114; Fri, 26 Apr 2013 08:46:21 -0700 (PDT)
Received: from [192.168.1.65] (dsl-173-206-2-115.tor.primus.ca. [173.206.2.115]) by mx.google.com with ESMTPSA id o10sm3806411igh.2.2013.04.26.08.46.19 for <behave@ietf.org> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Fri, 26 Apr 2013 08:46:20 -0700 (PDT)
Message-ID: <517AA14C.4030605@gmail.com>
Date: Fri, 26 Apr 2013 11:46:20 -0400
From: Tom Taylor <tom.taylor.stds@gmail.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130328 Thunderbird/17.0.5
MIME-Version: 1.0
To: "behave@ietf.org" <behave@ietf.org>
References: <517914F3.2070003@gmail.com>
In-Reply-To: <517914F3.2070003@gmail.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Subject: Re: [BEHAVE] NAT Logging -- Port violation event for MAP-E or LW4over6 BR
X-BeenThere: behave@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: mailing list of BEHAVE IETF WG <behave.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/behave>, <mailto:behave-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/behave>
List-Post: <mailto:behave@ietf.org>
List-Help: <mailto:behave-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/behave>, <mailto:behave-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 26 Apr 2013 15:46:22 -0000

Well, this comment has triggered an interesting discussion in Softwires, 
but now that I'm putting the final touches to a reissue of the SYSLOG 
NAT logging draft, I see it doesn't fit in very neatly there. The border 
router in these cases is not a NAT, so any discussion of logging 
probably belongs in a MAP-specific document. The CE is also responsible 
for checking, and the CE is a NAT, so it fits with the CE, but I'm not 
sure if it's worth standardizing.

I'll leave it out unless I get comments otherwise.

On 25/04/2013 7:35 AM, Tom Taylor wrote:
> The MAP-E and LW4over6 border routers are responsible for checking that
> the ports assigned by the CE are within the set allocated to that CE. I
> think we need a NAT logging event to report detection of an out-of-range
> port.
>
> Tom Taylor