Re: [dhcwg] dhc-lifetime-02: minimum value

On Aug 31, 2004, at 5:14 AM, Stig Venaas wrote:
> I agree sort of. For the protocol, I like the idea of totally ignoring
> option with invalid value though, which means using the default. The
> server implementation should perhaps give the administrator a warning,
> or send 600 rather than the configured value.
>
> We could also do what you suggest though. Other opinions?

There are cases where if any low value for this option is sent out over 
and over again by the server, it will cause operational problems.   But 
this isn't something we can easily prevent without being too 
restrictive, and I think you have to be really well-placed on a network 
(i.e., on the DHCP server's network) to get much amplification out of a 
DoS attack based on this.   In fact, when I think of how to come up 
with such a DoS attack, it seems like it would actually be very 
difficult.   So I think the real risk here is that the server 
administrator will configure a too-low value, so I think the right way 
to address this is to say that servers SHOULD warn the server 
administrator through an appropriate mechanism if the administrator 
tries to configure a too-low value for this option.

I think if you try to specify this on the protocol level, you're just 
making needless trouble for yourself, and not getting any benefit from 
it.

_______________________________________________
dhcwg mailing list
dhcwg@ietf.org
https://www1.ietf.org/mailman/listinfo/dhcwg