IETF Logo Mail Archive

Re: increasing DNS message entropy, a solution for NATs

Duane <duane@e164.org> Thu, 31 July 2008 09:55 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-namedroppers-archive-gleetwall6@core3.amsl.com
Delivered-To: ietfarch-namedroppers-archive-gleetwall6@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 66D303A69C6; Thu, 31 Jul 2008 02:55:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.931
X-Spam-Level:
X-Spam-Status: No, score=-0.931 tagged_above=-999 required=5 tests=[AWL=-0.436, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8AYhlAgCBsyk; Thu, 31 Jul 2008 02:55:38 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 84BF63A6807; Thu, 31 Jul 2008 02:55:38 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1KOUoW-000OLO-5x for namedroppers-data@psg.com; Thu, 31 Jul 2008 09:51:16 +0000
Received: from [208.82.100.153] (helo=mail.aus-biz.com) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from <duane@e164.org>) id 1KOUoS-000OKh-MA for namedroppers@ops.ietf.org; Thu, 31 Jul 2008 09:51:14 +0000
Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id 7639CFF26C; Thu, 31 Jul 2008 19:51:10 +1000 (EST)
Message-ID: <48918AF4.9030309@e164.org>
Date: Thu, 31 Jul 2008 19:50:44 +1000
From: Duane <duane@e164.org>
User-Agent: Thunderbird 2.0.0.16 (X11/20080724)
MIME-Version: 1.0
To: bmanning@vacation.karoshi.com
CC: Ray.Bellis@nominet.org.uk, namedroppers@ops.ietf.org
Subject: Re: increasing DNS message entropy, a solution for NATs
References: <48917DC8.7070004@e164.org> <OFCCB95657.08BB98E3-ON80257497.0032B72A-80257497.00337032@nominet.org.uk> <20080731094709.GA23362@vacation.karoshi.com.>
In-Reply-To: <20080731094709.GA23362@vacation.karoshi.com.>
X-Enigmail-Version: 0.95.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>

bmanning@vacation.karoshi.com wrote:

> 	as long as your going to point fingers, jumbograms in general
> 	get the short shrift.  4k UDP... 9k large frame...  don't fit
> 	nicely in a SoHo device.
> 
> 	Make sure you use/refer to David Piscatellos excellent study of
> 	firewalls.

I'm surprised no one mentioned IPv6 since we're on this soap box.

-- 

Best regards,
 Duane

--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>

v2.36.0 | Report a Bug | By Email | System Status