From nobody Mon Feb 14 00:53:35 2022 Return-Path: X-Original-To: v6ops@ietfa.amsl.com Delivered-To: v6ops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3746A3A0CB3 for ; Mon, 14 Feb 2022 00:53:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=posteo.de Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ex5bBb-Eirlt for ; Mon, 14 Feb 2022 00:53:28 -0800 (PST) Received: from mout01.posteo.de (mout01.posteo.de [185.67.36.65]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A55543A0CA4 for ; Mon, 14 Feb 2022 00:53:25 -0800 (PST) Received: from submission (posteo.de [185.67.36.169]) by mout01.posteo.de (Postfix) with ESMTPS id 683B3240029 for ; Mon, 14 Feb 2022 09:53:21 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.de; s=2017; t=1644828802; bh=/vJe6rMUFjByW0w0t/Lkm5lV0bYaICqJBdGFO67+Knc=; h=Date:To:From:Subject:From; b=BItQBoYS92pLT5dio4e+Fm39V/jhpKBAp0pxp65tOSkrIFr998B4JSoivLoOwg3au jc1BnTediJVdOe9lmBOiEoc2PI9T5kmWkJSx75lBo92aq75PX2hFfhpdk1cTkKAvUV 1xVyueGwDskDTdXKnpVW3mU0SS9ixIKfmlDUwNSP6hgvp2rHzF0UwjWPYJFQNOZeps K7hLPdYiBckD/hmEN8U2kVYOtpgPPAvLR0xdfAl123i+oDxmz555j98uKykUQS6foJ eQeZJuhJEr+um25csAFJ4ajztMEjw+qUgjfqGJUu/amxVIHZhsEyl6M7IsMPeXUOL+ WumJTbpP0r1Cw== Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 4Jxyg53wmrz9rxT for ; Mon, 14 Feb 2022 09:53:20 +0100 (CET) Message-ID: Date: Mon, 14 Feb 2022 08:53:20 +0000 MIME-Version: 1.0 Content-Language: en-US To: v6ops@ietf.org From: Klaus Frank Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-512; boundary="------------ms030906080103010108030607" Archived-At: Subject: [v6ops] I-D An Extension to DNS64 for Sender Policy Framework SPF Awareness X-BeenThere: v6ops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: v6ops discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Feb 2022 08:53:33 -0000 This is a cryptographically signed message in MIME format. --------------ms030906080103010108030607 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Hi, I wrote an I-D for updating DNS64 to better work for MTA operators. I'd like to get your opinions on that as some guidance on how to move forward with it (sorry I'm new to the process). Some background for this we had some issues with SPF and a mail server that was behind NAT64+DNS64. I at first thought that it was just a misconfiguration. But after the DNS64 server seamed to work as intended I went to the implementation and the RFC. Thereby while reading RFC6147 I stumbled across section 5.3.3 which says "All other RRs MUST be returned unchanged." which is the cause of my issues. This section is basically ignoring SPF records (RFC7208 section 5.6) and also preventing DNS64 implementations from addressing this limitation themselves. After some discussion on the behave and spfbis mailing list I created this I-D. I was referred to this mailing list as both the behave as well as the spfbis WG are closed. GitHub: https://github.com/agowa338/IETF-RFC-drafts/blob/main/draft-frank-dns64-spf-extension-03.xml Sincerely, Klaus Frank Name:        draft-frank-dns64-spf-extension Revision:    03 Title:        An Extension to DNS64 for Sender Policy Framework SPF Awareness Document date:    2022-02-14 Group:        Individual Submission Pages:        6 URL: https://www.ietf.org/archive/id/draft-frank-dns64-spf-extension-03.txt Status: https://datatracker.ietf.org/doc/draft-frank-dns64-spf-extension/ Html: https://www.ietf.org/archive/id/draft-frank-dns64-spf-extension-03.html Htmlized: https://datatracker.ietf.org/doc/html/draft-frank-dns64-spf-extension Diff: https://www.ietf.org/rfcdiff?url2=draft-frank-dns64-spf-extension-03 Abstract:    This document describes interoperability issues and resolutions    between DNS64 and SPF records for mail transfer agents.  This    document also aims to simplify the IPv6 migration for mail transfer    agent operators.    This document updates [RFC6147] and [RFC7208]. --------------ms030906080103010108030607 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgMFADCABgkqhkiG9w0BBwEAAKCC CyAwggUNMIID9aADAgECAhB4SqkQP6W/vt51CLE0kx0AMA0GCSqGSIb3DQEBCwUAMEwxIDAe BgNVBAsTF0dsb2JhbFNpZ24gUm9vdCBDQSAtIFIzMRMwEQYDVQQKEwpHbG9iYWxTaWduMRMw EQYDVQQDEwpHbG9iYWxTaWduMB4XDTIwMDkxNjAwMDAwMFoXDTI4MDkxNjAwMDAwMFowWzEL MAkGA1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExMTAvBgNVBAMTKEdsb2Jh bFNpZ24gR0NDIFIzIFBlcnNvbmFsU2lnbiAyIENBIDIwMjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9sKZcJyxtn9rR9EhAwHGniAmefJ6d4VikS03J2tln4Z4pIx0eIOBc PVSdFIi50qj6ahDpiUI67i2tVY78SJd9icrvN6inbqvLVGkq2iAHv87XXnO6W0DPrjJ1Bgt7 5rV79zOQAuDeyBNw45wVlNeTfx5qqxeyKmhfW+w26uo+2cLbtNawDumTi4pexwWOR5QTwlm7 0EMpqzBnKDEE48FAHCsDn7bRbGWTqTV7oQppo1o1lTLfSrcCsR/fRkOlfJ8K2Jee6mNIrxZT ZwriqwS2PT0lLj6aGLQJMKsKdcDO6be2BwdwdGDSmtxLPMRQNBagXHK6rCLCEe7ew9A2YU4z AgMBAAGjggHaMIIB1jAOBgNVHQ8BAf8EBAMCAYYwYAYDVR0lBFkwVwYIKwYBBQUHAwIGCCsG AQUFBwMEBgorBgEEAYI3FAICBgorBgEEAYI3CgMEBgkrBgEEAYI3FQYGCisGAQQBgjcKAwwG CCsGAQUFBwMHBggrBgEFBQcDETASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQWBBSWM9Hm WBdbNHWKgVZk1b5I3qGPzzAfBgNVHSMEGDAWgBSP8Et/qC5FJK5NUPpjmove4t0bvDB6Bggr BgEFBQcBAQRuMGwwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLmdsb2JhbHNpZ24uY29tL3Jv b3RyMzA7BggrBgEFBQcwAoYvaHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQv cm9vdC1yMy5jcnQwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2NybC5nbG9iYWxzaWduLmNv bS9yb290LXIzLmNybDBaBgNVHSAEUzBRMAsGCSsGAQQBoDIBKDBCBgorBgEEAaAyASgKMDQw MgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMA0G CSqGSIb3DQEBCwUAA4IBAQB0BeT9cKcN4A532c0RS9Y/FuU5D/mj+ro4h5Ni+gS9RSLaodQ6 1t+MEZ1Om0Wxdd7hGCNUX1voO6LOBh/L5wgua+LmF+TcirwwBmyC1b4D+i1Cwm8rbBFq0sTr VFvORfz385cRnXNPu3+rZGImrOm9Xw0KHEiP4/tZO16k+b0AiPQp6576BLaq/MBkBjfhll5E eADuDk7hM8n+hN37iuCJT77AsOVxlh3+yUWRpPfGDipYN6kQyNPhPWoU5Agv6KNQCthLijCk +D00hJMprWqopYmMWjKazR3QbA6eIghsG+EjYwnsFJj0xi1ZVPmMk7e2xUfCPhyn3YJIW4bC 6cUzMIIGCzCCBPOgAwIBAgIMXENzSjBANdaEAmFUMA0GCSqGSIb3DQEBCwUAMFsxCzAJBgNV BAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTEwLwYDVQQDEyhHbG9iYWxTaWdu IEdDQyBSMyBQZXJzb25hbFNpZ24gMiBDQSAyMDIwMB4XDTIxMDExNTIyNDMxN1oXDTIzMDUw NzEwNDU1NVowSTELMAkGA1UEBhMCREUxFDASBgNVBAMTC0tsYXVzIEZyYW5rMSQwIgYJKoZI hvcNAQkBFhVrbGF1cy5mcmFua0Bwb3N0ZW8uZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw ggIKAoICAQDJynviIV8lWEwIyAH5oxm4405Hy5PyN5b+VNSk+/cNA0bWcDfiJXa+O0JXQS22 Xwhu2MomP54d34PUsoMOxtc1fMUkLAP3QPYcxtklhlrW2g8Vl1kxfNbJFSDSacCzty3VZBw0 VGABUpu2IdzRYl6W5DEZkZByOWGv7J4bKV7hbh0NaWJ4OPwOCyeb0bAenBjLj7Xv6gTjjTQu UxXcn7HGXY6WqSmcPPaB18PRMiiCWalW4nmL0Ng+hEdos3dkPMKwIAVNI1fpbSfW0R1J6orc dfqI8CZPbrYo75N06kzm1XNHf0CcqgjOArvffp1caTTqtcYzehvgXLlVHZ97kjNq8JMWtkgj /4JjevLotHFylzJqmVVu/POE/nsLU0muMLPn5C3j/KOcp2CJcALbpWWDSgnmc35pKDA8gH8V DqUVmQbxFJ0FwgnqKZDycyGRmX5piUFkXFVySAL5AMhISFy7jrvIE/B/mHhUVeVOotZIrzs6 CZik2w5dcPXZH1888GsoTqVVWt8bQtUBDYA2srN57K34CP/4rrZXJPN9z2oONenUYu33fiOw nf3AGPjnGepE3IKbmd9wkfAnWB/qOUEKxut8kfa90Seg0ZCpFbSilYmndxibHzyFuGTlqlJG WTYuhPEOqvGRIJmW96Cnv8F8p0LfBn0u/lYBhsdv7E4XGwIDAQABo4IB3zCCAdswDgYDVR0P AQH/BAQDAgWgMIGjBggrBgEFBQcBAQSBljCBkzBOBggrBgEFBQcwAoZCaHR0cDovL3NlY3Vy ZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3NnY2NyM3BlcnNvbmFsc2lnbjJjYTIwMjAuY3J0 MEEGCCsGAQUFBzABhjVodHRwOi8vb2NzcC5nbG9iYWxzaWduLmNvbS9nc2djY3IzcGVyc29u YWxzaWduMmNhMjAyMDBMBgNVHSAERTBDMEEGCSsGAQQBoDIBKDA0MDIGCCsGAQUFBwIBFiZo dHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAJBgNVHRMEAjAAMEkGA1Ud HwRCMEAwPqA8oDqGOGh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3NnY2NyM3BlcnNvbmFs c2lnbjJjYTIwMjAuY3JsMCAGA1UdEQQZMBeBFWtsYXVzLmZyYW5rQHBvc3Rlby5kZTAdBgNV HSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwHwYDVR0jBBgwFoAUljPR5lgXWzR1ioFWZNW+ SN6hj88wHQYDVR0OBBYEFI9o2WnL3RYlPYT5/Nll9FkTqkpDMA0GCSqGSIb3DQEBCwUAA4IB AQBz4NRmY5rvOME2JwipWlLmF48zf7fJMFrd7B4LqS8SDSvXc5Z7Rmxl8+dOtaXSsPAd+jks jQ4pzcWsFPM6WlpzjQzvJtV8NoqEIiOiv9Sb+jvH70Nq1zqitfkKK9GqPunPaRT8k+tHpD3J yFV/T9XCezXPHAwnu60kcatRIMZhx713hVWimimnZH1ZEzyWaeuTBv5xmYRiyB+Q/zF6XsQW /0hhZ+USow22bo+Wb10sORRRzLL4INJVBDxkt2bFz5doNGUjC7o41a2ukj1/G+HpXxZxtyJ4 /4Ce4QaynJJ5eDTAx1xTmttJRs5AKUCvaSYvvLzxg1sVif9f+Rv4tYWyMYIEizCCBIcCAQEw azBbMQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTExMC8GA1UEAxMo R2xvYmFsU2lnbiBHQ0MgUjMgUGVyc29uYWxTaWduIDIgQ0EgMjAyMAIMXENzSjBANdaEAmFU MA0GCWCGSAFlAwQCAwUAoIIB8TAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3 DQEJBTEPFw0yMjAyMTQwODUzMjBaME8GCSqGSIb3DQEJBDFCBED/i0AukzjhgeevCQWTR/vE nYQps2ArFtRQ9o/kbAbCm/4GbQjS3zQTjzF2fMrZXo56n1faWbJK9zM9EmA6jqyzMGwGCSqG SIb3DQEJDzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggq hkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwegYJ KwYBBAGCNxAEMW0wazBbMQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1z YTExMC8GA1UEAxMoR2xvYmFsU2lnbiBHQ0MgUjMgUGVyc29uYWxTaWduIDIgQ0EgMjAyMAIM XENzSjBANdaEAmFUMHwGCyqGSIb3DQEJEAILMW2gazBbMQswCQYDVQQGEwJCRTEZMBcGA1UE ChMQR2xvYmFsU2lnbiBudi1zYTExMC8GA1UEAxMoR2xvYmFsU2lnbiBHQ0MgUjMgUGVyc29u YWxTaWduIDIgQ0EgMjAyMAIMXENzSjBANdaEAmFUMA0GCSqGSIb3DQEBAQUABIICABBAzgnw Dk+1MY6KEal2uw80HZta6xqqgA57xrgD8TOwALi5coOqpF62xZr4N05Sj+88K3hjmiBlv1Oq O/nd7zqMK2ieAmyVWCIWZ4jWowk+E3KKuR8kysuaFTFcx+bZ8ZEiMlNV8NM7eNkJUKZVVnFD 7XJ2uZc/+iJWqcbhUiOx+NPKBd5TrLRa/9Vz+qgWxxhGVNRoQ6tNua22ad5gCQCQsHCthmCc 8UhCdTcq5IcqeNeXp13sn67YSoCkzQkWq44XtIEhQRiNBzMjeuYTcviYdoW5GmpCKIVL9rrU uaI/2arTRSPw/osDDr/rRaTIKo1lUaMEc+wt4/PCC+jrSh6WYKQ0eFTFA1ZexV+4cVbg/Iaa GOCVTp/QF+VILaQXVDWGQtsFpl49cPJckL9zKCzVGVT3KKm0JDbPmOc7SguA5wl3dUZMgJjJ sXi3FvbRiXuGJkRWebG5KaXC25yykLFZ/2EYSQuLjf2o0pTkMyp8L5+U9PjIizyFGJtfeYat qV/s087k2NtDKQHucEun/yYQvOuDLOY+ZLNZPrPOj/Gw6ijL0C2A/kppu3t3oGIxf1wobZ66 ynSD2BjbjO7VXSKI4JK7iakbwcrXaTbL1GJ6zCUNvIYhBhPn5YwEoRukg2TfWfpU/9N22fmH QzfrTQhAtB6q0FyEiWJaCYDU9kp5AAAAAAAA --------------ms030906080103010108030607--