[tcpm] draft-sridharan-tcpm-ctcp-00 -- mail delivery problem

[Alfred Hönes <[e-mail]>]

I wanted to submit a big bunch of editorial comments on the I-D,
      draft-sridharan-tcpm-ctcp-00,
in private communications to the authors of this draft, because
this kind of comments is deemed clutter to the mailing list
(I'm not on regularly).

Unfortunately, some responsible persons within the affiliation of the
authors of this draft apparently have arranged to filter DNS traffic
to their public DNS servers by *source* port, effectively disabling
the possibility to perform MX record lookups from any recursive DNS
cache server behind a NAT/NAPT access router, where the source port
used on the public interface cannot be controlled.  This also makes
clients of the well-known public mail service hosted by that company
unreachable, and it makes the web and ftp servers of that company
invisible for this site and topologically similarly structured sites.

This problem persists since a couple of months, and has not existed
before.  The analysis performed shows that DNS requests sent to any
one of the five public DNS servers of that company always time out.
Support personal of our ISP has verified that these DNS servers
do respond to DNS requests with source port 53, but don't respond
to DNS requests with other source ports that result from the port
mapping of the NAPT router.

It should be noted that within the last year or two, we already
had suffered from similar (mis)behavior of other sites, e.g.:
maintainers of significant Internet infrastructure and registries
for very large gTLDs, important players in network security, and
some large academic campus networks.  In all these cases, the same
symptoms had been observed, and after an explanation of the problem,
showing that sending DNS requests with *any* UDP source port is
perfectly legal (as per all relevant RFCs), the problem has been
resolved quickly.
(This problem also already has been submitted to the DNSOP WG in 2006.)

In this case however, any attempts so far to make the responsible
persons aware of the problem (using third-party-forwarded messages)
unfortunately have not even been responded to, within the last two
months.

This note is another attempt to raise awareness of the problem and
restore full communications possibilities between IETF participants.

Thus, I kindly ask the authors of the draft to try to investigate
(or perhaps delegate) the problem appropriately.  Thankyou in advance.

Best regards,
  Alfred Hönes.

-- 

+------------------------+--------------------------------------------+
| TR-Sys Alfred Hoenes   |  Alfred Hoenes   Dipl.-Math., Dipl.-Phys.  |
| Gerlinger Strasse 12   |  Phone: [phone], Fax: -18         |
| D-71254  Ditzingen     |  E-Mail:  [e-mail]                     |
+------------------------+--------------------------------------------+



_______________________________________________
tcpm mailing list
[e-mail]
https://www1.ietf.org/mailman/listinfo/tcpm