[secdir] Secdir Review of draft-kucherawy-marf-source-ports-03

Joe Salowey <jsalowey@cisco.com> Mon, 04 June 2012 18:56 UTC

Return-Path: <jsalowey@cisco.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DDC0F11E80B5; Mon, 4 Jun 2012 11:56:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -110.599
X-Spam-Level:
X-Spam-Status: No, score=-110.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HIrPCOkRqgzR; Mon, 4 Jun 2012 11:56:14 -0700 (PDT)
Received: from mtv-iport-3.cisco.com (mtv-iport-3.cisco.com [173.36.130.14]) by ietfa.amsl.com (Postfix) with ESMTP id 756FA11E80B3; Mon, 4 Jun 2012 11:56:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=jsalowey@cisco.com; l=558; q=dns/txt; s=iport; t=1338836174; x=1340045774; h=from:content-transfer-encoding:subject:date:message-id: to:mime-version; bh=0LY+ocL+9bhQ0o1AmqDIEg9pS5u/ioNeHfeoO4V5K3A=; b=br0Pcp/sSA2RlBm1QoFzaVuK0HJQkfHmKMYpplYc3yf0Epxzs8qcCpnz tkOI6nvY72cuPJnixctkFhlekRY4WergEHJnAnS6ymu8m/HVl+bmRKX06 u0wNfDxlqW/2fEn7CGsH9v6fGaYehbhbJ3vU9EquM5eNhkFL2byA4NK+I o=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AiYFAK8EzU+rRDoI/2dsb2JhbABFgx2xEoEHgjEBJ4F9ATSHaJcmn0KQQWADiECMW4VQiECBZoMA
X-IronPort-AV: E=Sophos;i="4.75,714,1330905600"; d="scan'208";a="45043366"
Received: from mtv-core-3.cisco.com ([171.68.58.8]) by mtv-iport-3.cisco.com with ESMTP; 04 Jun 2012 18:56:01 +0000
Received: from [10.33.248.203] ([10.33.248.203]) by mtv-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id q54Iu0MD003845; Mon, 4 Jun 2012 18:56:00 GMT
From: Joe Salowey <jsalowey@cisco.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Mon, 04 Jun 2012 11:56:00 -0700
Message-Id: <4BADD87A-4CF2-409C-A14E-9AC03165E179@cisco.com>
To: The IESG <iesg@ietf.org>, secdir@ietf.org, draft-kucherawy-marf-source-ports.all@tools.ietf.org
Mime-Version: 1.0 (Apple Message framework v1278)
X-Mailer: Apple Mail (2.1278)
Subject: [secdir] Secdir Review of draft-kucherawy-marf-source-ports-03
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Jun 2012 18:56:15 -0000

I have reviewed this document as part of the security directorate's 
ongoing effort to review all IETF documents being processed by the 
IESG.  These comments were written primarily for the benefit of the 
security area directors.  Document editors and WG chairs should treat 
these comments just like any other last call comments.

This document adds source port information to Abuse Reporting Format.   This seems useful.  The security considerations refer to RFC 5965 (ARF) and RFC 6302, which seems sufficient.  

Thanks,

Joe