[Ipsec] Minor comment on draft-ietf-ipsec-rfc2402bis-10.txt (AH)

Markku Savela <msa@burp.tkv.asdf.org> Wed, 16 February 2005 14:56 UTC

Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA17059 for <ipsec-archive@lists.ietf.org>; Wed, 16 Feb 2005 09:56:05 -0500 (EST)
Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1D1QQu-0001y0-Rb; Wed, 16 Feb 2005 09:45:40 -0500
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1D1QOj-0001ZW-3H for ipsec@megatron.ietf.org; Wed, 16 Feb 2005 09:43:25 -0500
Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA15176 for <ipsec@ietf.org>; Wed, 16 Feb 2005 09:43:19 -0500 (EST)
Received: from burp.tkv.asdf.org ([212.16.99.49] ident=root) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1D1Qjt-0005qh-M8 for ipsec@ietf.org; Wed, 16 Feb 2005 10:05:21 -0500
Received: from burp.tkv.asdf.org (msa@localhost [127.0.0.1]) by burp.tkv.asdf.org (8.13.2/8.13.2/Debian-1) with ESMTP id j1GEhGrb017448 for <ipsec@ietf.org>; Wed, 16 Feb 2005 16:43:16 +0200
Received: (from msa@localhost) by burp.tkv.asdf.org (8.13.2/8.13.2/Submit) id j1GEhG0P017445; Wed, 16 Feb 2005 16:43:16 +0200
Date: Wed, 16 Feb 2005 16:43:16 +0200
Message-Id: <200502161443.j1GEhG0P017445@burp.tkv.asdf.org>
From: Markku Savela <msa@burp.tkv.asdf.org>
To: ipsec@ietf.org
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 9182cfff02fae4f1b6e9349e01d62f32
Subject: [Ipsec] Minor comment on draft-ietf-ipsec-rfc2402bis-10.txt (AH)
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: IP Security <ipsec.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
Sender: ipsec-bounces@ietf.org
Errors-To: ipsec-bounces@ietf.org

There is a strange sentence in:

3.3.3.1  Handling Mutable Fields
   ...
                          ...  If the IP (v4 or v6) implementation
   encounters an extension header that it does not recognize, it will
   discard the packet and send an ICMP message.  IPsec will never see
   the packet. 
   ...

There is no such thing as "unrecognized extension header". There are
only "recognized extension headers" and "transport protocol". Thus, if
a stack receives a header that it does not recognize as an extension
header, it must assume that it is a transport protocol. This protocol
may have receiver or may not (in Unix receiver may be using the raw
socket). If no receiver, it may result a protocol unreachable ICMP.

However, IPsec will see such packets (and actually have a policy
selector for it). Hence, the two sentences above could/should be
deleted.

Other that above editorial[?] issue(s), the text seem OK by me (same
applies to the ESP draft, which I forgot to state in my previous
comment).


_______________________________________________
Ipsec mailing list
Ipsec@ietf.org
https://www1.ietf.org/mailman/listinfo/ipsec