Re: [MMUSIC] 1 Week WGLC for draft-ietf-mmusic-rtsp-nat-evaluation-06

[Magnus Westerlund <[e-mail]>]

On 2013-05-17 17:49, Ari Keränen wrote:

> 
> 
> 4.9.1.  [TURN] Introduction
> 
>    On the external side this is
>    limited to the source address/port pair of the first packet arriving
>    on the binding.  After the first packet has arrived the mapping is
>    "locked down" to that address.  Packets from any other source on this
>    address will be discarded.
> 
> This doesn't sound right. This behavior was changed (eventually into
> using permissions) somewhere back in draft-rosenberg-midcom-turn-06. See
> http://tools.ietf.org/html/rfc5766#section-2.3 for up-to-date behavior.
> Check also steps 5 & 7 in the next section and section 4.9.4 for more
> lock down text.

I changed this to:

To prevent DoS attacks on either recipient, the packets forwarded are
restricted to the specific source address. On the client side it is
restricted to the source setting up the allocation. On the external side
this is limited to the source address/port pair that have been given
permission by the TURN client creating the allocation. Packets from any
other source on this address will be discarded.

I will shortly submit an updated draft.

Cheers

Magnus Westerlund

----------------------------------------------------------------------
Multimedia Technologies, Ericsson Research EAB/TVM
----------------------------------------------------------------------
Ericsson AB                | Phone  [phone]
Färögatan 6                | Mobile [phone]
SE-164 80 Stockholm, Sweden| mailto: [e-mail]
----------------------------------------------------------------------