[dns-dir] DNS-EW: draft-ietf-opsec-protect-control-plane-02.txt

DNS_EARLY_WARNING <ogud@ogud.com> Sat, 07 August 2010 18:39 UTC

Return-Path: <ogud@ogud.com>
X-Original-To: dns-dir@core3.amsl.com
Delivered-To: dns-dir@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 573153A683A for <dns-dir@core3.amsl.com>; Sat, 7 Aug 2010 11:39:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -101.038
X-Spam-Level:
X-Spam-Status: No, score=-101.038 tagged_above=-999 required=5 tests=[AWL=-0.853, BAYES_40=-0.185, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rnKY4QBXbkEp for <dns-dir@core3.amsl.com>; Sat, 7 Aug 2010 11:39:29 -0700 (PDT)
Received: from stora.ogud.com (stora.ogud.com [66.92.146.20]) by core3.amsl.com (Postfix) with ESMTP id 369863A680C for <dns-dir@ietf.org>; Sat, 7 Aug 2010 11:39:28 -0700 (PDT)
Received: from localhost (nyttbox.md.ogud.com [10.20.30.4]) by stora.ogud.com (8.14.4/8.14.4) with ESMTP id o77Ie05h018193 for <dns-dir@ietf.org>; Sat, 7 Aug 2010 14:40:00 -0400 (EDT) (envelope-from ogud@ogud.com)
To: dns-dir@ietf.org
From: DNS_EARLY_WARNING <ogud@ogud.com>
Date: Sat, 07 Aug 2010 14:40:00 -0400
X-Mailer: Perl script "early-2010.pl" using Mail::Sender 0.8.16 by Jenda Krynicky, Czechlands running on localhost (127.0.0.1) under account "idmbox"
Message-ID: <20100807_184000_050228.ogud@ogud.com>
X-Scanned-By: MIMEDefang 2.67 on 10.20.30.4
Subject: [dns-dir] DNS-EW: draft-ietf-opsec-protect-control-plane-02.txt
X-BeenThere: dns-dir@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF DNS directorate discussion list <dns-dir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dns-dir>, <mailto:dns-dir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dns-dir>
List-Post: <mailto:dns-dir@ietf.org>
List-Help: <mailto:dns-dir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dns-dir>, <mailto:dns-dir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 07 Aug 2010 18:39:30 -0000

Count:       10 


OPSEC                                                           D. Dugal
Internet-Draft                                          Juniper Networks
Intended status: Informational                              C. Pignataro
Expires: February 7, 2011                                        R. Dunn
                                                           Cisco Systems
                                                          August 6, 2010


                  Protecting The Router Control Plane
               draft-ietf-opsec-protect-control-plane-02

 Abstract

   This memo provides a method for protecting a router's control plane
   from undesired or malicious traffic.  In this approach, all
   legitimate router control plane traffic is identified.  Once
   legitimate traffic has been identified, a filter is deployed in the
   router's forwarding plane.  That filter prevents traffic not
   specifically identified as legitimate from reaching the router's
   control plane or rate limited to an acceptable level.