[secdir] secdir review of draft-ietf-mboned-mtrace-v2
"Dan Harkins" <dharkins@lounge.org> Thu, 14 July 2011 19:39 UTC
Return-Path: <dharkins@lounge.org>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C63D321F87A2; Thu, 14 Jul 2011 12:39:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.265
X-Spam-Level:
X-Spam-Status: No, score=-6.265 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AS9sljaEwCDo; Thu, 14 Jul 2011 12:39:23 -0700 (PDT)
Received: from colo.trepanning.net (colo.trepanning.net [69.55.226.174]) by ietfa.amsl.com (Postfix) with ESMTP id 57D0821F8748; Thu, 14 Jul 2011 12:39:23 -0700 (PDT)
Received: from www.trepanning.net (localhost [127.0.0.1]) by colo.trepanning.net (Postfix) with ESMTP id A2CA4A888108; Thu, 14 Jul 2011 12:39:22 -0700 (PDT)
Received: from 69.12.173.8 (SquirrelMail authenticated user dharkins@lounge.org) by www.trepanning.net with HTTP; Thu, 14 Jul 2011 12:39:22 -0700 (PDT)
Message-ID: <d665f5de93ea34fe7e536cdbe903f495.squirrel@www.trepanning.net>
Date: Thu, 14 Jul 2011 12:39:22 -0700
From: Dan Harkins <dharkins@lounge.org>
To: draft-ietf-mboned-mtrace-v2.all@tools.ietf.org, iesg@ietf.org, secdir@ietf.org
User-Agent: SquirrelMail/1.4.14 [SVN]
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
Subject: [secdir] secdir review of draft-ietf-mboned-mtrace-v2
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Jul 2011 19:39:23 -0000
Hi, I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This draft specifies version 2 of mtrace, a multicast traceroute facility. It provides a way to diagnose some issues with multicast like packet loss and isolation of configuration problems. Each router on the reverse path towards a source adds quite a bit of information to a mtrace2 response and the draft discusses how to diagnose problems using this information. mtrace2 seems like a useful tool and can discover quite a bit about a network. The security considerations deal with the fact that some of that information might be restricted and, in that case, recommends not forwarding mtrace2 into the network and replying appropriately-- administratively prohibited. That seems appropriate. I see no issues with this draft. regards, Dan.