RE: oversized-header-chains: Receipt of illegal first-fragments

Fernando,

Adding this text has the merit of being clear.

Two comments:
1) for the transition period (when we could perhaps see those packets -- even if I have yet to see one!), 'silently' is perhaps too strong, I would suggest at the bare minimum a dropped packet counter (else operators would be blind)
2) RFC1858 (the IPv4 equivalent of your I-D) specifies that routers with an ACL must also drop those packets and I would think that this should also be the case here but with a SHOULD for router implementing layer-4 ACL (not for plain forwarding routers or layer-3 ACL)

Hope it helps

-éric

> -----Original Message-----
> From: ipv6-bounces@ietf.org [mailto:ipv6-bounces@ietf.org] On Behalf Of
> Fernando Gont
> Sent: mercredi 18 juillet 2012 22:37
> To: ipv6@ietf.org
> Subject: oversized-header-chains: Receipt of illegal first-fragments
> 
> Folks,
> 
> There's one issue that came up during my recent exchange with Suresh on
> which I'd like others (including Suresh) to weigh in:
> 
> Since first-fragments that fail to include the entire header chain will be
> illegal, I think it would be appropriate to include an additional
> requirement in draft-ietf-6man-oversized-header-chain along the lines of:
> 
> "A host that receives a first-fragment that fails to include the entire
> IPv6 header chain MUST silently drop the aforementioned fragment".
> 
> Clearly, since such packets are illegal, they shouldn't exist in the first
> place... so dropping them makes sense.
> 
> Thoughts?
> 
> Thanks!
> 
> Best regards,
> --
> Fernando Gont
> SI6 Networks
> e-mail: fgont@si6networks.com
> PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492
> 
> 
> 
> 
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------