Re: [v6ops] [OPSEC] Call for WG adoption - Recommendations on Filtering of IPv6 Packets Containing IPv6 Extension Headers

"C. M. Heard" <heard@pobox.com> Tue, 14 October 2014 15:23 UTC

Return-Path: <heard@pobox.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 473AE1A88D0 for <v6ops@ietfa.amsl.com>; Tue, 14 Oct 2014 08:23:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.121
X-Spam-Level:
X-Spam-Status: No, score=-1.121 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_NEUTRAL=0.779] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0EmQfLNBaDHX for <v6ops@ietfa.amsl.com>; Tue, 14 Oct 2014 08:23:21 -0700 (PDT)
Received: from shell4.bayarea.net (shell4.bayarea.net [209.128.82.1]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 91FE31A88EE for <v6ops@ietf.org>; Tue, 14 Oct 2014 08:23:21 -0700 (PDT)
Received: (qmail 31413 invoked from network); 14 Oct 2014 08:23:17 -0700
Received: from shell4.bayarea.net (209.128.82.1) by shell4.bayarea.net with (DHE-RSA-AES256-SHA encrypted) SMTP; 14 Oct 2014 08:23:17 -0700
Date: Tue, 14 Oct 2014 08:23:17 -0700
From: "C. M. Heard" <heard@pobox.com>
X-X-Sender: heard@shell4.bayarea.net
To: Joe Touch <touch@isi.edu>
In-Reply-To: <543C3C8E.3010405@isi.edu>
Message-ID: <Pine.LNX.4.64.1410140816470.28685@shell4.bayarea.net>
References: <201410101259128179113@gmail.com> <279945F5-9A00-41AB-903E-FF4F858CB387@employees.org> <alpine.DEB.2.02.1410130907280.14735@uplift.swm.pp.se> <B499E06A-887A-4A9B-8FB9-EE2D3A1F9095@employees.org> <alpine.DEB.2.02.1410130926090.14735@uplift.swm.pp.se> <Pine.LNX.4.64.1410130723530.25821@shell4.bayarea.net> <543C2700.3060404@gmail.com> <543C3008.80506@isi.edu> <Pine.LNX.4.64.1410131339030.32206@shell4.bayarea.net> <543C3C8E.3010405@isi.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"
Archived-At: http://mailarchive.ietf.org/arch/msg/v6ops/PIpYEo74hcl_5Db9xiBs2eX6ch8
Cc: opsec <opsec@ietf.org>, v6ops <v6ops@ietf.org>
Subject: Re: [v6ops] [OPSEC] Call for WG adoption - Recommendations on Filtering of IPv6 Packets Containing IPv6 Extension Headers
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 14 Oct 2014 15:23:22 -0000

On Mon, 13 Oct 2014, Joe Touch wrote:
> On 10/13/2014 1:47 PM, C. M. Heard wrote:
> > On Mon, 13 Oct 2014, Joe Touch wrote:
> >> On 10/13/2014 12:24 PM, Brian E Carpenter wrote:
> >> ...
> >>> Exactly. I believe this draft, and the options draft, are *exactly* what
> >>> the IETF should do (and why we have an E in our name instead of an S;
> >>> we are not the Internet Standards Task Force). If our standards are
> >>> unrealistic, we should be the ones to do something about it...
> >>
> >> If it's that our standards are unrealistic, it would be useful to
> >> address this as changes to the standards.
> > 
> > That's what RFC 7045 does; it has "Updates: 2460, 2780" on its front 
> > page.  Similarly, draft-gont-6man-ipv6-opt-transmit (the options 
> > draft referred to above) has "Updates: 2460 (if approved)" in its 
> > front page.
> 
> Right, but it's not what either this doc
> (draft-gont-opsec-ipv6-eh-filtering) or
> draft-gont-v6ops-ipv6-ehs-in-real-world does.
> 
> I've raised this issue before.

If I correctly understand the intent, draft-gont-opsec-ipv6-eh-filtering 
is not supposed to make any recommendations that contravene RFC 2460 
as updated by RFC 7045 and draft-gont-6man-ipv6-opt-transmit.  If 
you see something specific where it does so please point it out.  I 
didn't find anything like that when I reviewed the document.

//cmh