Re: [Gen-art] Gen-ART review of draft-ietf-opsec-ip-security-05

[Fernando Gont <[e-mail]>]

Hi, Vijay,

Thanks so much for your feedback! -- Please find my response inline...

On 03/01/2011 03:05 p.m., Vijay K. Gurbani wrote:

> 1) S3.3.2.2, page 14 --- please expand the acronym "RED" on first use.

Will do.


> 2) S3.5.1, top of end of page 16 and top of page 17 --- "Linux (and
>  Solaris) later set the IP Identification field on a per-IP address
>  basis."  Which address --- source or destination?

"destination" -- although "per-remote IP address" would probably be more
correct clearer here. Thoughts?


> 4) S3.6, underneath Figure 5 on page 20 ---
>  s/In Figure 3, an attacker/In Figure 5, an attacker/

Good grief! -- Will fix this one.



> 5) Same section, same page ---
>  s/router that encounters that this/router to determine that this/

Yep, better. Will fix this. Thanks!



> 6) S3.7 --- when discussing the Fragment Offset, is it worth
>  stating that the Fragment Offset is measured in units of 8 octets
>  (thereby giving the magic number 65528 = 8191*8)?

This *is* mentioned in the first paragraph of Section 3.7, as follows:

---- cut here ----
   It indicates where in the original datagram payload
   the payload of the fragment belongs, and is measured in units of
   eight bytes.
---- cut here ----

So I assume no changes needed here?



> 7) S3.8.4, page 26, last bullet item at top of page ---
>  s/Four hops away from D./Two hops away from D./

The original text is incorrect, but I should s/Four/Three/ (rather than
s/Four/Two/). -- Will fix this as I've indicated.



> 8) S4.1.1.3, page 51, last paragraph of that subsection ---
>  Any references?

One possible example would be the ping 'o death. -- I will provide
references in the next rev of the document.



> 9) S4.1.1.4, page 52, first bullet item, first sentence ---
>  what do you mean by "overlapping fragments"?  Maybe you meant,
>  instead, "duplicate fragments"?

No, I did mean "overlapping fragments" -- i.e., fragments that contain a
portion of the same piece of original datagram (i.e., they overlap with
each other)

Thanks!

Kind regards,
-- 
Fernando Gont
e-mail: [e-mail] || [e-mail]
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1