Re: [DNSOP] 2 internet drafts relevant to DNSOP

Joseph Gersch <Joe.Gersch@Secure64.com> Wed, 14 March 2012 16:18 UTC

Return-Path: <Joe.Gersch@Secure64.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 07D2B21F8712 for <dnsop@ietfa.amsl.com>; Wed, 14 Mar 2012 09:18:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.495
X-Spam-Level:
X-Spam-Status: No, score=-0.495 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Qdm9VphT89m2 for <dnsop@ietfa.amsl.com>; Wed, 14 Mar 2012 09:18:53 -0700 (PDT)
Received: from zimbra.secure64.com (unknown [64.92.221.189]) by ietfa.amsl.com (Postfix) with ESMTP id 7DE2221F870E for <dnsop@ietf.org>; Wed, 14 Mar 2012 09:18:53 -0700 (PDT)
Received: from localhost (localhost.localdomain [127.0.0.1]) by zimbra.secure64.com (Postfix) with ESMTP id 66A5CB84E1; Wed, 14 Mar 2012 10:18:53 -0600 (MDT)
X-Virus-Scanned: amavisd-new at secure64.com
Received: from zimbra.secure64.com ([127.0.0.1]) by localhost (zimbra.secure64.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LMJ4tf1bRokR; Wed, 14 Mar 2012 10:18:53 -0600 (MDT)
Received: from [10.138.15.6] (unknown [192.168.254.4]) by zimbra.secure64.com (Postfix) with ESMTPSA id A66C4B8488; Wed, 14 Mar 2012 10:18:52 -0600 (MDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=secure64.com; s=2010; t=1331741932; bh=xR+npyxjbnY5bzZa8jkxaS1JI6ACYhPCdjDxjmTEdCI=; h=Subject:Mime-Version:Content-Type:From:In-Reply-To:Date:Cc: Content-Transfer-Encoding:Message-Id:References:To; b=Ir6VtNyGryQa ihinr1kzjXlBND/DoGRVOJ8+0jXq/aUBv0lh05ykNgO1UhdOEYcaK4CV9gjAFiSf9Pw hLB2nLQgSaBLYRmcvPrhT3OBQ09//9sW57TCP+odPC1bYH+L/UuCvQ7xeq4/WgXBw7p 1IS9VFjwHivGYIqpTedH40cmQ=
Mime-Version: 1.0 (Apple Message framework v1257)
Content-Type: text/plain; charset="iso-8859-1"
From: Joseph Gersch <Joe.Gersch@Secure64.com>
In-Reply-To: <4F5B811E.9050602@redbarn.org>
Date: Wed, 14 Mar 2012 10:18:53 -0600
Content-Transfer-Encoding: quoted-printable
Message-Id: <58848A45-8510-43EE-8FD6-6073AC6C9370@Secure64.com>
References: <5E9B2EA9-FE35-49DA-9FB4-9D80A310D5CC@Secure64.com> <4F5B811E.9050602@redbarn.org>
To: dnsop@ietf.org
X-Mailer: Apple Mail (2.1257)
Cc: Joseph Gersch <joe.gersch@secure64.com>, Daniel Massey <massey@cs.colostate.edu>
Subject: Re: [DNSOP] 2 internet drafts relevant to DNSOP
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Mar 2012 16:18:54 -0000

Paul,

   thanks for your comments and support.  We will definitely reference RFC draft 1101 in our next version.

- Joe and Dan


On Mar 10, 2012, at 9:28 AM, paul vixie wrote:

> joe, et al,
> 
> your draft-gersch-dnsop-revdns-cidr-01 is very clean and simple; the
> draft and the design are of admirable quality. as a co-author of RFC
> 2317 i agree that it does not suit the needs of bgp security since it
> seeks only to provide a method of fully naming hosts, not networks.
> 
> importantly, i see no reference to RFC 1101 in your draft. RFC 1101
> describes a way to name networks, and while at first it did not seem to
> be compatible with CIDR, implementation (in "netstat -r" back in BSD/OS
> 3.1) showed that RFC 1101 was in fact not as classful as it appeared.
> 
> i recommend a review of these functions, contained in the file dns_nw.c,
> present in bind8 as src/lib/irs/dns_nw.c, and also present in older
> versions of bind9, as well as various versions of netbsd and athena.
> 
> static struct nwent *   get1101byaddr(struct irs_nw *, u_char *, int);
> static struct nwent *   get1101byname(struct irs_nw *, const char *);
> static struct nwent *   get1101answer(struct irs_nw *,
>                                      u_char *ansbuf, int anslen,
>                                      enum by_what by_what,
>                                      int af, const char *name,
>                                      const u_char *addr, int addrlen);
> static struct nwent *   get1101mask(struct irs_nw *this, struct nwent *);
> static int              make1101inaddr(const u_char *, int, char *, int);
> 
> you may find that some of your work has already been done for you, or,
> you may find that this is related work that should be referenced in your
> draft along with the reasons why your proposed method is necessary.
> 
> paul

Joseph Gersch
Chief Operating Officer
Secure64 Software Corporation