IETF Logo Mail Archive

Re: Non-Last Small IPv6 Fragments

Tom Herbert <tom@herbertland.com> Sun, 13 January 2019 21:08 UTC

Return-Path: <tom@herbertland.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 61854128B01 for <ipv6@ietfa.amsl.com>; Sun, 13 Jan 2019 13:08:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.041
X-Spam-Level:
X-Spam-Status: No, score=-2.041 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.142, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=herbertland-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DnGjPVIMT9OB for <ipv6@ietfa.amsl.com>; Sun, 13 Jan 2019 13:08:49 -0800 (PST)
Received: from mail-qk1-x72a.google.com (mail-qk1-x72a.google.com [IPv6:2607:f8b0:4864:20::72a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D4E6124408 for <ipv6@ietf.org>; Sun, 13 Jan 2019 13:08:48 -0800 (PST)
Received: by mail-qk1-x72a.google.com with SMTP id d15so9535395qkj.0 for <ipv6@ietf.org>; Sun, 13 Jan 2019 13:08:48 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=herbertland-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ckePxzsrKqiUXRVDgKfPCbhJGHy8MnvLJeaDIr8I/ug=; b=1ALzhMEoZWOBXJkOfW0B06q6o8/Khegh9CmZFbH1kLIk3OyP6q6gCrUfXeBgcB6AtD vZhCRZqNIAy7gVE3O7tDsoKhMMOK+er60BeAhsBJ/mgQSCCa0li02sDaXAx2aB8bTHfJ 2Y5DqbAIAeUQSOn1v3w5yvS2gPBKWv+wsD4jb1wjv4fTBiJWoiT5n+HNzkvL2zU0BVo3 eSfV5u/nROoYxrsBZZwQZ307xaocZHpD+xvd1j2wnB8ESll/7WXKSbpNh4VnbekysXYt byHNMfbKKfz/YrP80ad1O2NZSBTPX/5s6kbvkDpv4fUU73bzevdwLWVbGcrkgoKVUDzR ruMg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ckePxzsrKqiUXRVDgKfPCbhJGHy8MnvLJeaDIr8I/ug=; b=qRqA5CK9AVANpPSMRh6BAp3Ghk70tA9fAnVW3Nbd4UPqJHm5Mv3iXpTisWC/ocvWls kYXMji284woeFGnIdEmYsswlbvMU1xAAe4Aew8Ee3M7vpIO9m68fhZ8zOD2lqDXWufaQ r5ZH+I1AQJl7hJNgGsFXOcygeZzvrocfhJEEng00vwkomXwU38TUB44P9eQS8/JMIw6H vJXvjpYNAoege9CAscAciciIz5J2CI5l1GuqFPdh4oHsKYxRRU3Y28tGRe7Xc7aSscpP Lq+pfXAvoJUjcxY47OZMR22czvMUR80VxvBB3VoDZueuLU0YvwXYIQFffKNBTL7L023g WuHw==
X-Gm-Message-State: AJcUuke7UBD6ZO8iVlvZogeVkxtxqSp0OIAK8cBKtf+iM1JDnjop/G5q ahB7bTRQbmA3z2ShWKu0zEriD7mOr8zzKtct7FtH5A==
X-Google-Smtp-Source: ALg8bN5t6vB57pRmJySUA6NMSJq0saZLJNp7CjATtuWBC3q7HRKjTD5I1WhElPQQcKcQVl4hhTDZ/qeqitnQF5IzvzE=
X-Received: by 2002:a37:b482:: with SMTP id d124mr20814149qkf.168.1547413727860; Sun, 13 Jan 2019 13:08:47 -0800 (PST)
MIME-Version: 1.0
References: <CAOSSMjV0Vazum5OKztWhAhJrjLjXc5w5YGxdzHgbzi7YVSk7rg@mail.gmail.com> <CALx6S35KNhV2gFp9OdU+M1zy5WUuEAEvXkDXNDWWxi7uQ4e_cw@mail.gmail.com> <CAN-Dau0rTdiiF2SjByxcMG6nhPCEjUH2pYBCOeK_FSGJ_ucDQw@mail.gmail.com> <CALx6S34AyV9OpvnjQhQc56n5vfeVgU5Zd3kheP0g+XvsMbBV9g@mail.gmail.com> <1b2e318e-1a9f-bb5d-75a5-04444c42ef20@si6networks.com> <CALx6S37TJr++fC=pVoeS=mrO1fHc4gL_Wtu-XkVTswzs2XxXCA@mail.gmail.com> <CALx6S36V7vrVyoTP0G6+S5XeFNB3KWS5UaNnVi20xogRERdCfg@mail.gmail.com> <973A1649-55F6-4D97-A97F-CEF555A4D397@employees.org> <CALx6S34YbBe8xBod3VsWVO33TpZcdxh2uV1vaO8Z_NKnVXp66g@mail.gmail.com> <A3C3F9C0-0A07-41AF-9671-B9E486CB8246@employees.org> <AEA47E27-C0CB-4ABE-8ADE-51E9D599EF8F@gmail.com> <6aae7888-46a4-342d-1d76-10f8b50cebc4@gmail.com> <CALx6S35QKOqn_Ywh9yzm1JDA8Xnp7fLPPmXUvomvz_xOZP8bfg@mail.gmail.com> <4373c8d2-b36f-39c7-3591-1263af0f155b@foobar.org> <CALx6S34QoOwUuzht3jTP87uCyWc-0a0pyNPHTYCftpPwRQKrtQ@mail.gmail.com> <16fc05b4-e632-90bd-1f93-955de9673245@foobar.org>
In-Reply-To: <16fc05b4-e632-90bd-1f93-955de9673245@foobar.org>
From: Tom Herbert <tom@herbertland.com>
Date: Sun, 13 Jan 2019 13:08:35 -0800
Message-ID: <CALx6S34Dm0uB8+xPsDUtYmmnXXGiHwnQ0t=RHLb4V5VmRMsCag@mail.gmail.com>
Subject: Re: Non-Last Small IPv6 Fragments
To: Nick Hilliard <nick@foobar.org>
Cc: Brian E Carpenter <brian.e.carpenter@gmail.com>, 6man <ipv6@ietf.org>, Bob Hinden <bob.hinden@gmail.com>
Content-Type: multipart/alternative; boundary="00000000000091ed17057f5d55ce"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/xQH5QqnwZ0K3HGjvYTZAEcV82QI>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 13 Jan 2019 21:08:51 -0000

On Sun, Jan 13, 2019, 12:57 PM Nick Hilliard <nick@foobar.org wrote:

> Tom Herbert wrote on 13/01/2019 20:29:
> > No legitimate host implementation would send this either. If B is
> > receiving these packets, the logical conclusion is that it's under DOS
> > attack and someone is spoofing A's address.
>
> or that host A has a broken ipv6 implementation.


> >> There doesn't seem to be a compelling case to change the protocol to
> >> accommodate this particular corner case.  It ranks as annoyance rather
> >> than a serious threat.
> >
> > Maybe not changing the protocols, but I still don't see a compelling
> > case to knowingly accept packets that are highly likely to be a part
> > of a DOS attack.
>
> me neither, but that's an operational decision.


Sure, except that once we put a limit like this in Linux it eventually runs
on billions of host and the majority of servers. I'd rather have alignment
with standards instead making yet another ad hoc standard that someone
eventually has to reverse engineer.

Tom



.
>
> Nick
>
>

v2.23.0 | Report a Bug | By Email