Return-Path: X-Original-To: ietfarch-idr-archive@core3.amsl.com Delivered-To: ietfarch-idr-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AA4753A6E7D; Wed, 27 Feb 2008 20:04:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.637 X-Spam-Level: X-Spam-Status: No, score=-0.637 tagged_above=-999 required=5 tests=[AWL=-0.200, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_ORG=0.611, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 99KS2Ryt9iMw; Wed, 27 Feb 2008 20:04:35 -0800 (PST) Received: from core3.amsl.com (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AAE543A6E60; Wed, 27 Feb 2008 20:04:35 -0800 (PST) X-Original-To: idr@core3.amsl.com Delivered-To: idr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7320C3A6E7D for ; Wed, 27 Feb 2008 20:04:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N6dMEdTYC+NN for ; Wed, 27 Feb 2008 20:04:28 -0800 (PST) Received: from el-out-1112.google.com (el-out-1112.google.com [209.85.162.181]) by core3.amsl.com (Postfix) with ESMTP id 65DAE3A68C8 for ; Wed, 27 Feb 2008 20:04:28 -0800 (PST) Received: by el-out-1112.google.com with SMTP id j27so4239431elf.25 for ; Wed, 27 Feb 2008 20:04:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type; bh=jTHtWARk74wlSqaqfFsE+NyYnn7NxweLKG0NFDtMsIo=; b=w0Vz+YwTeAfvq3sIY7tQgS0eujZ63jw7O0zBDPVfrbi5oKRAgh13h/+2jd4WQCCo0KWGJ5czTSu4FGTabKBkR+bj6eqVrFRJTfuargalW8mS2R1mpWyx39292KtjZi4/4izfTqVePjAQu3mvFNxzm2lYxxhwO4I5RV0zsPhcxno= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:mime-version:content-type; b=nPX5LHKWZF4BdOKoCqZJ9s32QXhqYpyHIx9vB3Gle69wpga/TaZH7Jd9ZAbT9xEZTclWGQAmseFxzOkQ5hpVrZ93Dzdy4/7biPLjy4mWOWIMyb5ekSHZNk60IiJciXZYfrO8j79+PtpsGvT2C6d42aozTUuB1Pg5/2jv5xL1j+0= Received: by 10.114.81.1 with SMTP id e1mr8567734wab.11.1204171455879; Wed, 27 Feb 2008 20:04:15 -0800 (PST) Received: by 10.114.241.4 with HTTP; Wed, 27 Feb 2008 20:04:15 -0800 (PST) Message-ID: <77ead0ec0802272004r776fec76yb80df62b8f7b684b@mail.gmail.com> Date: Wed, 27 Feb 2008 20:04:15 -0800 From: "Vishwas Manral" To: idr , sidr MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_Part_31239_5771214.1204171455873" Subject: [Idr] Issues with SIDR X-BeenThere: idr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Inter-Domain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: idr-bounces@ietf.org Errors-To: idr-bounces@ietf.org ------=_Part_31239_5771214.1204171455873 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline Hi folks, As part of the discussion in OPSEC with Stephen Kent and others, I looked at the SIDR infrastructure as well as soBGP document. I found easy ways to just get over all the security infrastructure(PKI) and still being able to do all the attacks as we can currently. Please have a look at the discussion below and let me know your comments. Thanks, Vishwas ---------- Forwarded message ---------- From: Vishwas Manral Date: Wed, Feb 27, 2008 at 7:13 PM Subject: Re: [OPSEC] pccw as17557 leak... To: Stephen Kent Cc: Roland Dobbins , opsec wg mailing list Hi Steve, Thanks a lot for the comments. I agree it can be a good first step but not sure what the future holds. I am not sure if a heavy solution like this is required which only gives reasonable security. What about the CPU DoS attacks that can be result when new random routes are injected into a domain. Thanks again, Vishwas On Wed, Feb 27, 2008 at 7:07 PM, Stephen Kent wrote: > At 5:12 PM -0800 2/27/08, Vishwas Manral wrote: > >Hi folks, > > > >I looked at the SIDR documents in brief. It can probably be used to > >help prevent any attacks caused due to non-malicious intent. > > > >I found easy ways to get over the SIDR security when done with a > >malicious intent. SIDR just tells the mapping between AFI, AF and AS > >number which can originate the same. However the choosing of a route > >by BGP does not depend on these fields alone. So if a malicious router > >changed the attributes attached to an NLRI update so that it becomes > >the chosen AS to the prefix (of course without changing the > >originating AS field). It can still redirect all the traffic to itself > >for the prefix and then do whatever malicious it wants to do, > >including just drop the packet. > > > >In this way still achieving the attack, but this time for sure with > >malicious intent. > > > >Thanks, > >Vishwas > > > Your example of how an AS can tamper with a route, without changing > the origin AS assertion is correct. I think the SIDR WG participants > understand that. > The work so far i SIDR focuses on establishing an infrastructure that > will enable more comprehensive routing security capabilities in the > future. Both the soBGP and SBGP proposal need this sort of > infrastructure, so it is viewed as a reasonable initial effort. > > I also agree with your observation that the infrastructure makes it > potentially easier to distinguish between some forms of attacks vs. > accidental routing errors, and that, in itself, seems valuable too. > > Steve > ------=_Part_31239_5771214.1204171455873 Content-Type: text/plain; name=draft-manral-sidr-limitations-00.txt Content-Transfer-Encoding: base64 X-Attachment-Id: f_fd6shs8j0 Content-Disposition: attachment; filename=draft-manral-sidr-limitations-00.txt ICAgICAgICAgICAgICAgICAgIA0KSW50ZXJuZXQgRW5naW5lZXJpbmcgVGFzayBGb3JjZSAgICAg ICAgICAgICAgICAgICAgICAgICAgIFZpc2h3YXMgTWFucmFsDQpJbnRlcm5ldC1EcmFmdCAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBJUEluZnVzaW9uIEluYy4NCklu dGVuZGVkIHN0YXR1czogU3RhbmRhcmRzIFRyYWNrICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICANCkV4cGlyZXM6IEF1Z3VzdCAyNywgMjAwOCAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgRmVicnVhcnkgMjcsIDIwMDgNCg0KDQogICAgICAgICAgICAgICAgICAgICBT ZWN1cml0eSBsaW1pdGF0aW9ucyBvZiBTSURSDQogICAgICAgICAgICAgICAgICAgICAgIA0KICAg ICAgICAgICAgICAgICAgIGRyYWZ0LW1hbnJhbC1zaWRyLWxpbWl0YXRpb25zLTAwDQoNClN0YXR1 cyBvZiB0aGlzIE1lbW8NCg0KICAgQnkgc3VibWl0dGluZyB0aGlzIEludGVybmV0LURyYWZ0LCBl YWNoIGF1dGhvciByZXByZXNlbnRzIHRoYXQgYW55DQogICBhcHBsaWNhYmxlIHBhdGVudCBvciBv dGhlciBJUFIgY2xhaW1zIG9mIHdoaWNoIGhlIG9yIHNoZSBpcyBhd2FyZQ0KICAgaGF2ZSBiZWVu IG9yIHdpbGwgYmUgZGlzY2xvc2VkLCBhbmQgYW55IG9mIHdoaWNoIGhlIG9yIHNoZSBiZWNvbWVz DQogICBhd2FyZSB3aWxsIGJlIGRpc2Nsb3NlZCwgaW4gYWNjb3JkYW5jZSB3aXRoIFNlY3Rpb24g NiBvZiBCQ1AgNzkuDQoNCiAgIEludGVybmV0LURyYWZ0cyBhcmUgd29ya2luZyBkb2N1bWVudHMg b2YgdGhlIEludGVybmV0IEVuZ2luZWVyaW5nDQogICBUYXNrIEZvcmNlIChJRVRGKSwgaXRzIGFy ZWFzLCBhbmQgaXRzIHdvcmtpbmcgZ3JvdXBzLiAgTm90ZSB0aGF0DQogICBvdGhlciBncm91cHMg bWF5IGFsc28gZGlzdHJpYnV0ZSB3b3JraW5nIGRvY3VtZW50cyBhcyBJbnRlcm5ldC0NCiAgIERy YWZ0cy4NCg0KICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBkb2N1bWVudHMgdmFsaWQgZm9y IGEgbWF4aW11bSBvZiBzaXggbW9udGhzDQogICBhbmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2Vk LCBvciBvYnNvbGV0ZWQgYnkgb3RoZXIgZG9jdW1lbnRzIGF0IGFueQ0KICAgdGltZS4gIEl0IGlz IGluYXBwcm9wcmlhdGUgdG8gdXNlIEludGVybmV0LURyYWZ0cyBhcyByZWZlcmVuY2UNCiAgIG1h dGVyaWFsIG9yIHRvIGNpdGUgdGhlbSBvdGhlciB0aGFuIGFzICJ3b3JrIGluIHByb2dyZXNzLiIN Cg0KICAgVGhlIGxpc3Qgb2YgY3VycmVudCBJbnRlcm5ldC1EcmFmdHMgY2FuIGJlIGFjY2Vzc2Vk IGF0DQogICBodHRwOi8vd3d3LmlldGYub3JnL2lldGYvMWlkLWFic3RyYWN0cy50eHQuDQoNCiAg IFRoZSBsaXN0IG9mIEludGVybmV0LURyYWZ0IFNoYWRvdyBEaXJlY3RvcmllcyBjYW4gYmUgYWNj ZXNzZWQgYXQNCiAgIGh0dHA6Ly93d3cuaWV0Zi5vcmcvc2hhZG93Lmh0bWwuDQoNCiAgIFRoaXMg SW50ZXJuZXQtRHJhZnQgd2lsbCBleHBpcmUgb24gQXVndXN0IDI3LCAyMDA4Lg0KDQpDb3B5cmln aHQgTm90aWNlDQoNCiAgIENvcHlyaWdodCAoQykgVGhlIElFVEYgVHJ1c3QgKDIwMDgpLg0KDQpB YnN0cmFjdA0KDQogICBTSURSIGFyY2hpdGVjdHVyZSBkZXNjcmliZXMgYW4gYXJjaGl0ZWN0dXJl IGZvciBhbiBpbmZyYXN0cnVjdHVyZSB0byANCiAgIHN1cHBvcnQgc2VjdXJlIEludGVybmV0IHJv dXRpbmcuIFRoZSBmb3VuZGF0aW9uIG9mIHRoZSBhcmNoaXRlY3R1cmUgDQogICBpcyBhIHB1Ymxp YyBrZXkgaW5mcmFzdHJ1Y3R1cmUgKFBLSSkgdGhhdCByZXByZXNlbnRzIHRoZSBhbGxvY2F0aW9u IA0KICAgaGllcmFyY2h5IG9mIElQIGFkZHJlc3Mgc3BhY2UgYW5kIEF1dG9ub21vdXMgU3lzdGVt IE51bWJlcnM7IA0KICAgY2VydGlmaWNhdGVzIGZyb20gdGhpcyBQS0kgYXJlIHVzZWQgdG8gdmVy aWZ5IHNpZ25lZCBvYmplY3RzIHRoYXQgDQogICBhdXRob3JpemUgYXV0b25vbW91cyBzeXN0ZW1z IHRvIG9yaWdpbmF0ZSByb3V0ZXMgZm9yIHNwZWNpZmllZCBJUCAgDQoNCg0KDQpNYW5yYWwgICAg ICAgICAgICAgICAgICAgICAgRXhwaXJlcyBBdWd1c3QgMjcsIDIwMDggICAgICAgICAgICAgICAg IFtQYWdlIDFdDQogDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgU2VjdXJpdHkgbGltaXRhdGlv bnMgb2YgU0lEUiAgICAgICAgICAgRmVicnVhcnkgMjAwOA0KDQoNCiAgIGFkZHJlc3MgcHJlZml4 ZXMuIFRoZSBkYXRhIG9iamVjdHMgdGhhdCBjb21wcmlzZSB0aGUgUEtJLCBhcyB3ZWxsIGFzIA0K ICAgb3RoZXIgc2lnbmVkIG9iamVjdHMgbmVjZXNzYXJ5IGZvciBzZWN1cmUgcm91dGluZywgYXJl IHN0b3JlZCBhbmQgDQogICBkaXNzZW1pbmF0ZWQgdGhyb3VnaCBhIGRpc3RyaWJ1dGVkIHJlcG9z aXRvcnkgc3lzdGVtLiBUaGlzIGRvY3VtZW50IA0KICAgZGVzY3JpYmVzIGxpbWl0YXRpb25zIGFu ZCBvdGhlciBsaW1pdGF0aW9ucyB0byB0aGUgdXNlIG9mIHRoZSBTSURSIA0KICAgaW5mcmFzdHJ1 Y3R1cmUuDQoNCg0KUmVxdWlyZW1lbnRzIExhbmd1YWdlDQoNCiAgIFRoZSBrZXkgd29yZHMgIk1V U1QiLCAiTVVTVCBOT1QiLCAiUkVRVUlSRUQiLCAiU0hBTEwiLCAiU0hBTEwgTk9UIiwNCiAgICJT SE9VTEQiLCAiU0hPVUxEIE5PVCIsICJSRUNPTU1FTkRFRCIsICJNQVkiLCBhbmQgIk9QVElPTkFM IiBpbiB0aGlzDQogICBkb2N1bWVudCBhcmUgdG8gYmUgaW50ZXJwcmV0ZWQgYXMgZGVzY3JpYmVk IGluIFJGQyAyMTE5IFtSRkMyMTE5XS4NCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Ck1hbnJhbCAgICAgICAgICAgICAgICAgICAgICBFeHBpcmVzIEF1Z3VzdCAyNywgMjAwOCAgICAg ICAgICAgICAgICAgW1BhZ2UgMl0NCiANCkludGVybmV0LURyYWZ0ICAgICAgICAgICBTZWN1cml0 eSBsaW1pdGF0aW9ucyBvZiBTSURSICAgICAgICAgICBGZWJydWFyeSAyMDA4DQoNCg0KICAxLiAg SW50cm9kdWN0aW9uDQogICAgIA0KICAgIFRoaXMgZG9jdW1lbnQgZGVmaW5lcyB0aGUgbGltaXRh dGlvbnMgb2YgdGhlIFNJRFIgaW5mcmFzdHJ1Y3R1cmUgYW5kIHRoZWlyDQogICAgdXNlIHdpdGgg c28tQkdQIGFuZCBvdGhlciBzdWNoIHJlbGF0ZWQgc2VjdXJpdHkgbWVjaGFuaXNtcy4NCg0KICAy LiBMaW1pdGF0aW9ucw0KDQogICAgMi4xLiBQcm9ibGVtIHdpdGgganVzdCB2ZXJpZnlpbmcgb3Jp Z2luDQogICAgICAgICAgICAgICAgDQogICAgICAgIFNJRFIgYXJjaGl0ZWN0dXJlIGFsbG93cyBh IG1lY2hhbmlzbSB0byB2ZXJpZnkgYW4gQXV0b25vbW91UyBTeXN0ZW0gKEFTKQ0KICAgICAgICBo YXMgcmlnaHRzIHRvIG9yaWdpbmF0ZSBhIHBhcnRpY3VsYXIgcHJlZml4Lg0KDQogICAgICAgIEJH UCBiZXN0IHJvdXRlIHNlbGVjdGlvbiBhbGdvcml0aG0gaG93ZXZlciBkb2VzIG5vdCBvbmx5IHVz ZSB0aGUgb3JpZ2luYWluZyANCiAgICAgICAgQVMsIGFuZCBOTFJJIHByZWZpeC4gSXQgdXNlcyBh IGxvdCBvZiBvdGhlciBhdHRyaWJ1dGVzIGFzc29jaWF0ZWQgd2l0aCB0aGUgDQogICAgICAgIHJv dXRlIHRvIGNhbGN1bGF0ZSB0aGUgYmVzdCByb3V0ZSBhbmQgcHJvcGFnYXRlIGl0IGFjcm9zcy4g SWYgdGhlIG1hbGljaW91cw0KICAgICAgICByb3V0ZXIgZG9lcyBub3QgY2hhbmdlIHRoZSBvcmln aW4gQVMgZm9yIGFuIE5MUkkgcHJlZml4IGJ1dCBjaGFuZ2VzIG90aGVyIA0KICAgICAgICBhdHRy aWJ1dGVzIHJlcXVpcmVkIGZvciBiZXN0IHBhdGggc2VsZWN0aW9uLiBJdCBjYW4gc3RpbGwgbWFr ZSBhIGxvdCBvZiANCiAgICAgICAgcm91dGVzIGJlIHJvdXRlZCB0aHJvdWdoIGl0LiANCg0KICAg ICAgICBUaGUgbWFsaWNpb3VzIGRldmljZSBjYW4gdGhlbiBkbyB3aGF0ZXZlciBpdCB3YW50cyB3 aXRoIHN1Y2hjIHRyYWZmaWMgDQogICAgICAgIGluY2x1ZGluZyBibGFja2hvbGluZyBpdC4NCg0K ICAgIDIuMiBDUFUgdXRpbGl6YXRpb24NCiAgDQogICAgICAgIEFzIHZlcmlmeWluZyBjZXJ0aWZp Y2F0ZXMgY29zdHMgYSBsb3Qgb2YgQ1BVIGN5Y2xlcywgdGhpcyBjYW4gbGVhZCB0byBEb1MgDQog ICAgICAgIGF0dGFja3Mgb24gdGhlIHJvdXRlci4NCg0KICAgICAgICBVc2luZyByYXRlIGxpbWl0 aW5nIGNhbiByZXN1bHQgaW4gZGVsYXlzIGluIEJHUCBjb252ZXJnZW5jZS4NCg0KICAzLiAgU2Vj dXJpdHkgQ29uc2lkZXJhdGlvbnMNCg0KICAgVGhpcyBkb2N1bWVudCBkZWZpbmVzIHRoZSBzZWN1 cnR5IGxpbWl0YXRpb25zIG9mIHRoZSBTSURSIFBLSSBpbmZyYXN0cnVjdHVyZSB3aGVuDQogICB1 c2VkIHdpdGggQkdQLiAgDQoNCiAgNC4gIElBTkEgQ29uc2lkZXJhdGlvbnMNCg0KICAgVGhpcyBk b2N1bWVudCBoYXMgbm8gYWN0aW9ucyBmb3IgSUFOQSBbSUFOQV0uDQoNCg0KICA1LiAgQWNrbm93 bGVkZ2VtZW50cw0KDQogICBBIGxvdCBvZiB0aGUgdGV4dCBpbiB0aGlzIGRvY3VtZW50IGlzIGJv cnJvd2VkIGZyb20gW1NJRFItQVJDSF0uIFRoZQ0KICAgYXV0aG9ycyBvZiB0aGUgZG9jdW1lbnQg YXJlIGFja25vd2xlZGdlZC4gDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCk1hbnJhbCAgICAgICAgICAgICAgICAgICAgICBFeHBpcmVzIEF1Z3VzdCAy NywgMjAwOCAgICAgICAgICAgICAgICAgW1BhZ2UgN10NCiANCkludGVybmV0LURyYWZ0ICAgICAg ICAgICBTZWN1cml0eSBsaW1pdGF0aW9ucyBvZiBTSURSICAgICAgICAgICBGZWJydWFyeSAyMDA4 DQoNCg0KDQo4LiAgUmVmZXJlbmNlcw0KDQo4LjEuICBOb3JtYXRpdmUgUmVmZXJlbmNlcw0KDQog ICBbSUFOQV0gICAgICAgIE5hcnRlbiwgVC4gYW5kIEguIEFsdmVzdHJhbmQsICJHdWlkZWxpbmVz IGZvciBXcml0aW5nDQogICAgICAgICAgICAgICAgIGFuIElBTkEgQ29uc2lkZXJhdGlvbnMgU2Vj dGlvbiBpbiBSRkNzIiwgQkNQIDI2LCBSRkMNCiAgICAgICAgICAgICAgICAgMjQzNCwgT2N0b2Jl ciAxOTk4Lg0KDQogICBbU0lEUi1BUkNIXSAgIFNJRFIgYXJjaGl0ZWN0dXJlIGRvY3VtZW50DQoN CjguMi4gIEluZm9ybWF0aXZlIFJlZmVyZW5jZXMNCg0KDQoNCg0KDQpNYW5yYWwgICAgICAgICAg ICAgICAgICAgICAgRXhwaXJlcyBBdWd1c3QgMjcsIDIwMDggICAgICAgICAgICAgICAgIFtQYWdl IDhdDQogDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgU2VjdXJpdHkgbGltaXRhdGlvbnMgb2Yg U0lEUiAgICAgICAgICAgRmVicnVhcnkgMjAwOA0KDQoNCkF1dGhvcnMnIEFkZHJlc3Nlcw0KDQog ICBWaXNod2FzIE1hbnJhbA0KICAgSVAgSW5mdXNpb24gSW5jLiwNCiAgIEJhbWFua2hvbGEsIA0K ICAgQmFuc2dhbGksDQogICBBbG1vcmEsDQogICBVdHRhcmFraGFuZCAtIDI2MzYwMQ0KICAgSW5k aWENCiAgIEVtYWlsOiB2aXNod2FzQGlwaW5mdXNpb24uY29tICANCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCk1hbnJhbCAgICAgICAgICAgICAgICAgICAgICBFeHBpcmVzIEF1Z3VzdCAyNywgMjAwOCAg ICAgICAgICAgICAgICBbUGFnZSA5XQ0KIA0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgIFNlY3Vy aXR5IGxpbWl0YXRpb25zIG9mIFNJRFIgICAgICAgICAgIEZlYnJ1YXJ5IDIwMDgNCg0KDQpGdWxs IENvcHlyaWdodCBTdGF0ZW1lbnQNCg0KICAgQ29weXJpZ2h0IChDKSBUaGUgSUVURiBUcnVzdCAo MjAwOCkuDQoNCiAgIFRoaXMgZG9jdW1lbnQgaXMgc3ViamVjdCB0byB0aGUgcmlnaHRzLCBsaWNl bnNlcyBhbmQgcmVzdHJpY3Rpb25zDQogICBjb250YWluZWQgaW4gQkNQIDc4LCBhbmQgZXhjZXB0 IGFzIHNldCBmb3J0aCB0aGVyZWluLCB0aGUgYXV0aG9ycw0KICAgcmV0YWluIGFsbCB0aGVpciBy aWdodHMuDQoNCiAgIFRoaXMgZG9jdW1lbnQgYW5kIHRoZSBpbmZvcm1hdGlvbiBjb250YWluZWQg aGVyZWluIGFyZSBwcm92aWRlZCBvbiBhbg0KICAgIkFTIElTIiBiYXNpcyBhbmQgVEhFIENPTlRS SUJVVE9SLCBUSEUgT1JHQU5JWkFUSU9OIEhFL1NIRSBSRVBSRVNFTlRTDQogICBPUiBJUyBTUE9O U09SRUQgQlkgKElGIEFOWSksIFRIRSBJTlRFUk5FVCBTT0NJRVRZLCBUSEUgSUVURiBUUlVTVCBB TkQNCiAgIFRIRSBJTlRFUk5FVCBFTkdJTkVFUklORyBUQVNLIEZPUkNFIERJU0NMQUlNIEFMTCBX QVJSQU5USUVTLCBFWFBSRVNTDQogICBPUiBJTVBMSUVELCBJTkNMVURJTkcgQlVUIE5PVCBMSU1J VEVEIFRPIEFOWSBXQVJSQU5UWSBUSEFUIFRIRSBVU0UgT0YNCiAgIFRIRSBJTkZPUk1BVElPTiBI RVJFSU4gV0lMTCBOT1QgSU5GUklOR0UgQU5ZIFJJR0hUUyBPUiBBTlkgSU1QTElFRA0KICAgV0FS UkFOVElFUyBPRiBNRVJDSEFOVEFCSUxJVFkgT1IgRklUTkVTUyBGT1IgQSBQQVJUSUNVTEFSIFBV UlBPU0UuDQoNCg0KSW50ZWxsZWN0dWFsIFByb3BlcnR5DQoNCiAgIFRoZSBJRVRGIHRha2VzIG5v IHBvc2l0aW9uIHJlZ2FyZGluZyB0aGUgdmFsaWRpdHkgb3Igc2NvcGUgb2YgYW55DQogICBJbnRl bGxlY3R1YWwgUHJvcGVydHkgUmlnaHRzIG9yIG90aGVyIHJpZ2h0cyB0aGF0IG1pZ2h0IGJlIGNs YWltZWQgdG8NCiAgIHBlcnRhaW4gdG8gdGhlIGltcGxlbWVudGF0aW9uIG9yIHVzZSBvZiB0aGUg dGVjaG5vbG9neSBkZXNjcmliZWQgaW4NCiAgIHRoaXMgZG9jdW1lbnQgb3IgdGhlIGV4dGVudCB0 byB3aGljaCBhbnkgbGljZW5zZSB1bmRlciBzdWNoIHJpZ2h0cw0KICAgbWlnaHQgb3IgbWlnaHQg bm90IGJlIGF2YWlsYWJsZTsgbm9yIGRvZXMgaXQgcmVwcmVzZW50IHRoYXQgaXQgaGFzDQogICBt YWRlIGFueSBpbmRlcGVuZGVudCBlZmZvcnQgdG8gaWRlbnRpZnkgYW55IHN1Y2ggcmlnaHRzLiAg SW5mb3JtYXRpb24NCiAgIG9uIHRoZSBwcm9jZWR1cmVzIHdpdGggcmVzcGVjdCB0byByaWdodHMg aW4gUkZDIGRvY3VtZW50cyBjYW4gYmUNCiAgIGZvdW5kIGluIEJDUCA3OCBhbmQgQkNQIDc5Lg0K DQogICBDb3BpZXMgb2YgSVBSIGRpc2Nsb3N1cmVzIG1hZGUgdG8gdGhlIElFVEYgU2VjcmV0YXJp YXQgYW5kIGFueQ0KICAgYXNzdXJhbmNlcyBvZiBsaWNlbnNlcyB0byBiZSBtYWRlIGF2YWlsYWJs ZSwgb3IgdGhlIHJlc3VsdCBvZiBhbg0KICAgYXR0ZW1wdCBtYWRlIHRvIG9idGFpbiBhIGdlbmVy YWwgbGljZW5zZSBvciBwZXJtaXNzaW9uIGZvciB0aGUgdXNlIG9mDQogICBzdWNoIHByb3ByaWV0 YXJ5IHJpZ2h0cyBieSBpbXBsZW1lbnRlcnMgb3IgdXNlcnMgb2YgdGhpcw0KICAgc3BlY2lmaWNh dGlvbiBjYW4gYmUgb2J0YWluZWQgZnJvbSB0aGUgSUVURiBvbi1saW5lIElQUiByZXBvc2l0b3J5 IGF0DQogICBodHRwOi8vd3d3LmlldGYub3JnL2lwci4NCg0KICAgVGhlIElFVEYgaW52aXRlcyBh bnkgaW50ZXJlc3RlZCBwYXJ0eSB0byBicmluZyB0byBpdHMgYXR0ZW50aW9uIGFueQ0KICAgY29w eXJpZ2h0cywgcGF0ZW50cyBvciBwYXRlbnQgYXBwbGljYXRpb25zLCBvciBvdGhlciBwcm9wcmll dGFyeQ0KICAgcmlnaHRzIHRoYXQgbWF5IGNvdmVyIHRlY2hub2xvZ3kgdGhhdCBtYXkgYmUgcmVx dWlyZWQgdG8gaW1wbGVtZW50DQogICB0aGlzIHN0YW5kYXJkLiAgUGxlYXNlIGFkZHJlc3MgdGhl IGluZm9ybWF0aW9uIHRvIHRoZSBJRVRGIGF0DQogICBpZXRmLWlwckBpZXRmLm9yZy4NCg0KDQpB Y2tub3dsZWRnbWVudA0KDQogICBGdW5kaW5nIGZvciB0aGUgUkZDIEVkaXRvciBmdW5jdGlvbiBp cyBwcm92aWRlZCBieSB0aGUgSUVURg0KICAgQWRtaW5pc3RyYXRpdmUgU3VwcG9ydCBBY3Rpdml0 eSAoSUFTQSkuDQoNCg0KDQoNCg0KTWFucmFsICAgICAgICAgICAgICAgICAgICAgIEV4cGlyZXMg QXVndXN0IDI3LCAyMDA4ICAgICAgICAgICAgICAgIFtQYWdlIDEwXQ0KIA0KDQo= ------=_Part_31239_5771214.1204171455873 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Idr mailing list Idr@ietf.org https://www.ietf.org/mailman/listinfo/idr ------=_Part_31239_5771214.1204171455873--