Re: [DNSOP] 2 internet drafts relevant to DNSOP

paul vixie <paul@redbarn.org> Sat, 10 March 2012 16:28 UTC

Return-Path: <paul@redbarn.org>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EED8121F8658 for <dnsop@ietfa.amsl.com>; Sat, 10 Mar 2012 08:28:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.527
X-Spam-Level:
X-Spam-Status: No, score=-2.527 tagged_above=-999 required=5 tests=[AWL=0.072, BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G80M6ZUijRuz for <dnsop@ietfa.amsl.com>; Sat, 10 Mar 2012 08:28:21 -0800 (PST)
Received: from ss.vix.com (ss.vix.com [IPv6:2001:559:8000:cb::2]) by ietfa.amsl.com (Postfix) with ESMTP id 9171721F8655 for <dnsop@ietf.org>; Sat, 10 Mar 2012 08:28:21 -0800 (PST)
Received: from [198.18.136.198] (unknown [201.204.76.162]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by ss.vix.com (Postfix) with ESMTPSA id E5C07EDAE6; Sat, 10 Mar 2012 16:28:19 +0000 (UTC) (envelope-from paul@redbarn.org)
Message-ID: <4F5B811E.9050602@redbarn.org>
Date: Sat, 10 Mar 2012 16:28:14 +0000
From: paul vixie <paul@redbarn.org>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:10.0.2) Gecko/20120216 Thunderbird/10.0.2
MIME-Version: 1.0
To: Joseph Gersch <Joe.Gersch@Secure64.com>
References: <5E9B2EA9-FE35-49DA-9FB4-9D80A310D5CC@Secure64.com>
In-Reply-To: <5E9B2EA9-FE35-49DA-9FB4-9D80A310D5CC@Secure64.com>
X-Enigmail-Version: 1.3.5
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Cc: dnsop@ietf.org
Subject: Re: [DNSOP] 2 internet drafts relevant to DNSOP
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 10 Mar 2012 16:28:28 -0000

joe, et al,

your draft-gersch-dnsop-revdns-cidr-01 is very clean and simple; the
draft and the design are of admirable quality. as a co-author of RFC
2317 i agree that it does not suit the needs of bgp security since it
seeks only to provide a method of fully naming hosts, not networks.

importantly, i see no reference to RFC 1101 in your draft. RFC 1101
describes a way to name networks, and while at first it did not seem to
be compatible with CIDR, implementation (in "netstat -r" back in BSD/OS
3.1) showed that RFC 1101 was in fact not as classful as it appeared.

i recommend a review of these functions, contained in the file dns_nw.c,
present in bind8 as src/lib/irs/dns_nw.c, and also present in older
versions of bind9, as well as various versions of netbsd and athena.

static struct nwent *   get1101byaddr(struct irs_nw *, u_char *, int);
static struct nwent *   get1101byname(struct irs_nw *, const char *);
static struct nwent *   get1101answer(struct irs_nw *,
                                      u_char *ansbuf, int anslen,
                                      enum by_what by_what,
                                      int af, const char *name,
                                      const u_char *addr, int addrlen);
static struct nwent *   get1101mask(struct irs_nw *this, struct nwent *);
static int              make1101inaddr(const u_char *, int, char *, int);

you may find that some of your work has already been done for you, or,
you may find that this is related work that should be referenced in your
draft along with the reasons why your proposed method is necessary.

paul