[Sipping] Re: draft-campen-sipping-stack-loop-detect-00, top route headers and spiraling

Byron Campen <bcampen@estacado.net> Sat, 20 May 2006 17:18 UTC

Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1FhV5p-0000uO-9L; Sat, 20 May 2006 13:18:21 -0400
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1FhV5n-0000tz-E1 for sipping@ietf.org; Sat, 20 May 2006 13:18:19 -0400
Received: from dsl001-129-069.dfw1.dsl.speakeasy.net ([72.1.129.69] helo=vicuna.estacado.net) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1FhV5m-0005E8-UA for sipping@ietf.org; Sat, 20 May 2006 13:18:19 -0400
Received: from [71.159.138.58] (adsl-71-159-138-58.dsl.rcsntx.sbcglobal.net [71.159.138.58]) (authenticated bits=0) by vicuna.estacado.net (8.13.4/8.13.4) with ESMTP id k4KHIB0m033173 (version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NO); Sat, 20 May 2006 12:18:15 -0500 (CDT) (envelope-from bcampen@estacado.net)
In-Reply-To: <004901c67c29$8aed7900$31713b51@BEMBUSTER>
References: <002901c67c08$3782a810$31713b51@BEMBUSTER> <FEDCDCEB-1D7E-48EB-8751-F1461F373F3B@estacado.net> <004901c67c29$8aed7900$31713b51@BEMBUSTER>
Mime-Version: 1.0 (Apple Message framework v750)
X-Priority: 3
Message-Id: <3500FC1A-7520-4081-A618-A2A62581413F@estacado.net>
From: Byron Campen <bcampen@estacado.net>
Date: Sat, 20 May 2006 12:17:57 -0500
To: Jeroen van Bemmel <jbemmel@zonnet.nl>
X-Mailer: Apple Mail (2.750)
X-Spam-Score: 0.1 (/)
X-Scan-Signature: 1449ead51a2ff026dcb23465f5379250
Cc: sipping <sipping@ietf.org>
Subject: [Sipping] Re: draft-campen-sipping-stack-loop-detect-00, top route headers and spiraling
X-BeenThere: sipping@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "SIPPING Working Group \(applications of SIP\)" <sipping.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/sipping>, <mailto:sipping-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:sipping@ietf.org>
List-Help: <mailto:sipping-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/sipping>, <mailto:sipping-request@ietf.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============1579036252=="
Errors-To: sipping-bounces@ietf.org

	Yes, I plan to revise my draft, although the information you have  
highlighted below would be more appropriate to put in a revision of  
the fork-loop-fix draft, and possibly also the max-breadth draft.
	The fork-prevention idea will not work, I am afraid, since it will  
trigger on legitimate spirals that pop up all the time in the real  
world. (Say, bob@foo -> appserver -> bob@foo -> bob's UAs (fork) )

Best regards,
Byron Campen

> Byron,
> Thanks for your responses. I think it would be worthwhile to  
> include this information in your draft, it helps to make things  
> explicit.
> Unfortunately, loop-detection actually doesn't solve the forking- 
> loop exploit detailed in maxforwards-problems. Instead of a  
> maxforwards^m level of amplification(m is the number of proxies  
> involved), we still get well over an m! level of amplification.  
> Robert Sparks worked it out to O(m^m), and I am not surprised (this  
> of course only applies for cases where m < max-forwards). This is  
> an improvement, but is still not acceptable. The only solution put  
> forward so far  that seems to adequately reduce the damage caused  
> by the forking loop exploit is the technique detailed in the max- 
> breadth draft.
>
> I made a suggestion on the list the other day: keep a forking proxy  
> from forwarding to an element which is already on the Via list,  
> i.e. loop prevention rather than detection. You would still need  
> both of course, since one cannot rely on other proxies having  
> implemented this. I believe it could be a simple and effective  
> solution, what do you think?
>
> Regards,
>
> Jeroen
>

_______________________________________________
Sipping mailing list  https://www1.ietf.org/mailman/listinfo/sipping
This list is for NEW development of the application of SIP
Use sip-implementors@cs.columbia.edu for questions on current sip
Use sip@ietf.org for new developments of core SIP