From nobody Tue May 29 08:04:20 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 884BF1200E5; Tue, 29 May 2018 08:04:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.51 X-Spam-Level: X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vb38Phm6uvAt; Tue, 29 May 2018 08:04:04 -0700 (PDT) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9B932127876; Tue, 29 May 2018 08:04:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1438; q=dns/txt; s=iport; t=1527606243; x=1528815843; h=from:to:subject:date:message-id:content-id: content-transfer-encoding:mime-version; bh=zFe5qNGMYL97xmmr4WUZHxuN7cUONV0TnWgY09sArno=; b=dpWVA7sy9YAHkl8WqOAz4psbXy2TGU4RkWpPFSHhskSIo4ZtxKs3GXPM zxel3tGGp+ulnTWmjcZPFzjN+PzvL3AV363rEAPa97fMZKopq69xxxYqP kh+ihpGGmvshoN63YedAtg8XD5TRsSnX95yC9EqiJxFjgNBQ4t9J4AzW1 I=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BwAQDlag1b/4ENJK1bGwEBAQEDAQE?= =?us-ascii?q?BCQEBAYNEYn8oCoNtiASMa4MIkzuBeAsjhEkZggAhNBgBAgEBAQEBAQJsHAy?= =?us-ascii?q?FKQYjETcDHQEIGgImAgQwFQYBBgUEARKDIgKBfw+lOIIciD2BYwWBCYctgVQ?= =?us-ascii?q?/gQ8kgmmDEQIDAYFzgmkwgiQCmGIJAoVqiHSBO4Nvgl+EfYlshngCERMBgSQ?= =?us-ascii?q?dOIFScBU7KgGCGIsQhT5vjk6BGQEB?= X-IronPort-AV: E=Sophos;i="5.49,456,1520899200"; d="scan'208";a="400579283" Received: from alln-core-9.cisco.com ([173.36.13.129]) by rcdn-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 29 May 2018 15:04:01 +0000 Received: from XCH-RTP-015.cisco.com (xch-rtp-015.cisco.com [64.101.220.155]) by alln-core-9.cisco.com (8.14.5/8.14.5) with ESMTP id w4TF41oq005250 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 29 May 2018 15:04:01 GMT Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-015.cisco.com (64.101.220.155) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Tue, 29 May 2018 11:04:00 -0400 Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1320.000; Tue, 29 May 2018 11:04:00 -0400 From: "Eric Vyncke (evyncke)" To: "opsec@ietf.org" , "v6ops@ietf.org" , "ipv6@ietf.org" Thread-Topic: IETF WG state changed for draft-ietf-opsec-ipv6-eh-filtering for 2 weeks Thread-Index: AQHT915GWqTo08UY5EiI+u6439n7Ow== Date: Tue, 29 May 2018 15:04:00 +0000 Message-ID: Accept-Language: fr-FR, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1e.0.170107 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.55.56.3] Content-Type: text/plain; charset="utf-8" Content-ID: <122F888D35948D479CB1FDC9E2C70EC6@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: [OPSEC] FW: IETF WG state changed for draft-ietf-opsec-ipv6-eh-filtering for 2 weeks X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 May 2018 15:04:07 -0000 W1NlbnQgdG8gT1BTRUMsIDZNQU4gYW5kIFY2T1BTIG1haWxpbmcgbGlzdF0NCg0KQXMgZGlzY3Vz c2VkIGF0IG91ciBsYXN0IE9TUEVDIFdHIG1lZXRpbmcsIHRoaXMgaXMgdG8gb3BlbiBhIHR3by13 ZWVrIFdHTEMgZm9yOg0KICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0 LWlldGYtb3BzZWMtaXB2Ni1laC1maWx0ZXJpbmcvDQoNCklmIHlvdSBoYXZlIG5vdCByZWFkIGl0 LCBwbGVhc2UgZG8gc28gbm93LiBZb3UgbWF5IHNlbmQgbml0cyB0byB0aGUgYXV0aG9yLCBidXQg c3Vic3RhbnRpdmUgZGlzY3Vzc2lvbiBzaG91bGQgZ28gdG8gdGhlIG9wc2VjQGlldGYub3JnIGxp c3QuDQoNCihXaGlsZSBWNk9QUyAmIDZNQU4gV0cgYXJlIGluIGNjIGJlY2F1c2Ugb2YgY2xvc2Ug YWxpZ25tZW50IHdpdGggdGhlIFdHIGV4cGVydGlzZSBhcmVhLCBtYXkgd2UgYXNrIHRvIHNlbmQg ZmVlZGJhY2sgYW5kIGNvbW1lbnRzIGluIHRoZSBPUFNFQyBXRyA/KQ0KIA0KV2Ugd2lsbCBjbG9z ZSB0aGUgY2FsbCBvbiAxMiBKdW5lIDIwMTguDQoNCkJlc3QgcmVnYXJkcywNCg0KLcOpcmljICYg LXJvbiAoT1BTRUMgV0cgY28tY2hhaXJzKQ0KDQpPbiAyOS8wNS8xOCAxNjoyMSwgIklFVEYgU2Vj cmV0YXJpYXQiIDxpZXRmLXNlY3JldGFyaWF0LXJlcGx5QGlldGYub3JnPiB3cm90ZToNCg0KICAg IA0KICAgIFRoZSBJRVRGIFdHIHN0YXRlIG9mIGRyYWZ0LWlldGYtb3BzZWMtaXB2Ni1laC1maWx0 ZXJpbmcgaGFzIGJlZW4gY2hhbmdlZCB0bw0KICAgICJJbiBXRyBMYXN0IENhbGwiIGZyb20gIldH IERvY3VtZW50IiBieSDDiXJpYyBWeW5ja2U6DQogICAgDQogICAgaHR0cHM6Ly9kYXRhdHJhY2tl ci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1vcHNlYy1pcHY2LWVoLWZpbHRlcmluZy8NCiAgICAN CiAgICBDb21tZW50Og0KICAgIFRoZSBjb25zZW5zdXMgYXQgSUVURi0xMDEgbWVldGluZyB3YXMg dGhhdCB0aGUgZG9jdW1lbnQgaXMgcmVhZHkgZm9yIFdHTEMuDQogICAgU28sIGxldCdzIG9wZW4g YSAyLXdlZWsgV0dMQy4NCiAgICANCg0K From nobody Tue May 29 09:18:08 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1A811250B8 for ; Tue, 29 May 2018 09:18:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, T_DKIMWL_WL_MED=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=herbertland-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mXeUTQQl4fmJ for ; Tue, 29 May 2018 09:18:04 -0700 (PDT) Received: from mail-qt0-x22a.google.com (mail-qt0-x22a.google.com [IPv6:2607:f8b0:400d:c0d::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 22E3D126BF3 for ; Tue, 29 May 2018 09:18:04 -0700 (PDT) Received: by mail-qt0-x22a.google.com with SMTP id e8-v6so19376339qth.0 for ; Tue, 29 May 2018 09:18:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=herbertland-com.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=y98Dky0NiFrhQP2bvCo6bhr+pYz4dk8exklVzTITKjU=; b=kWTLTMLAkUR7aytnTjIB5Wn54FD7E3FJQeXufvcouY95tPpq5VlUIyTY4raarj07U6 1mfAyEaWk7GWNA8xRPGrL8xc50wi4+0g5GtjwoJN4QbKjFtXu8oPaSNfiue6Jq5OvZxm tKReAktIXfj5M/1Uga85EWM/z/knRIWNKsibqtaK1wRd2+THWaNkEW/uTvKjeQvZ9vqQ j86a75YW5t5O97/SQ5LzDawTWVnkgYFK2XHYvlMGQi1YwWjGKSG7NIo2TbFAndIE1rvN woyhPJRct4LgerG8xOG5vanNyncvww91HRxF5kVv34BuoSU4TpY6dp2Fvpi67mw+L/7K XSng== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=y98Dky0NiFrhQP2bvCo6bhr+pYz4dk8exklVzTITKjU=; b=n6PdSs38LvKbeniScwDM2wffZ9O1EMVdYjvoWWMdqkW1a8iPwLzxTS2Xy3zJjQ43b2 vPlgbzFaNTLoFseagQgkghUjcclsrU7ZAjC8nXMHn2XlnzYRANDOga3/rp90c5QOQ2yZ rBMoOFG+j0BfefLkF//In4h8/mgILCMruV8x7B8tcMBsQAB43N2LLQQLzFpL7lPwieTU yiNMbm+axYCPHQDZDMPMl2BVBO1lkUZx5K661Nw/uo7pIjddfdbVom/QWAWXOd5ijBrO 71naewXp2XsRzcHzXqrlqqhoju8Rp85zpCmgu+8m988mUcBNInRelA9D9QzlDtSa0T0P edVA== X-Gm-Message-State: ALKqPwcaetZv7K+6Q5PFhsA5W9fpMiwDADrGYfGFq+t+YoSUFCIy7HsU Wg4svjtZ9UzQTel8QT+l+28jCe0hdx89EbCWEIiQnuFX X-Google-Smtp-Source: ADUXVKJR0VrQB9uoLSxrZnsG59yxXSgMt/HX26uVm6fCxGSka9GeMR2gZm94RxbN9RuOc3GFQC12fWSIzx2UvlS2pEs= X-Received: by 2002:ac8:33f6:: with SMTP id d51-v6mr17174643qtb.254.1527610682900; Tue, 29 May 2018 09:18:02 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:aed:3042:0:0:0:0:0 with HTTP; Tue, 29 May 2018 09:18:02 -0700 (PDT) From: Tom Herbert Date: Tue, 29 May 2018 09:18:02 -0700 Message-ID: To: opsec@ietf.org Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: [OPSEC] Comments on draft-ietf-opsec-ipv6-eh-filtering X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 May 2018 16:18:06 -0000 Hello, There's a couple of drafts that may be relevant to this. Section 5.3 of draft-ietf-6man-rfc6434-bis describes how a host may drop packets that contain to many options in an DO or HBH EH (i.e. a mitigation against DOS attack). draft-ietf-6man-icmp-limits describes ICMP errors that may be sent if a packet with EH is dropped because it's limits for processing the extension headers are exceeded. Tom From nobody Wed May 30 10:21:19 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8688A12E046 for ; Wed, 30 May 2018 10:21:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hi10tPs_PMAU for ; Wed, 30 May 2018 10:21:14 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8CA0912DB6B for ; Wed, 30 May 2018 10:21:14 -0700 (PDT) Received: from [192.168.1.58] (unknown [31.173.85.241]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 7F67582C2B; Wed, 30 May 2018 19:21:10 +0200 (CEST) To: Tom Herbert , opsec@ietf.org References: From: Fernando Gont Openpgp: preference=signencrypt Autocrypt: addr=fgont@si6networks.com; prefer-encrypt=mutual; keydata= xsFNBE5so2gBEACzBQBLUy8nzgAzSZn6ViXT6TmZBFNYNqTpPRvTVtUqF6+tkI+IEd9N2E8p pXUXCd0W4dkxz6o7pagnK63m4QSueggvp881RVVHOF8oTSHOdnGxLfLeLNJFKE1FOutU3vod GK/wG/Fwzkv9MebdXpMlLV8nnJuAt66XGl/lU1JrNfrKO4SoYQi4TsB/waUQcygh7OR/PEO0 EttiU8kZUbZNv58WH+PAj/rdZCrgUSiGXiWUQQKShqKnJxLuAcTcg5YRwL8se/V6ciW0QR9i /sr52gSmLLbW5N3hAoO+nv1V/9SjJAUvzXu43k8sua/XlCXkqU7uLj41CRR72JeUZ4DQsYfP LfNPC98ZGTVxbWbFtLXxpzzDDT8i3uo7w1LJ2Ij/d5ezcARqw01HGljWWxnidUrjbTpxkJ9X EllcsH94mer728j/HKzC9OcTuz6WUBP3Crgl6Q47gY5ZIiF0lsmd9/wxbaq5NiJ+lGuBRZrD v0dQx9KmyI0/pH2AF8cW897/6ypvcyD/1/11CJcN+uAGIrklwJlVpRSbKbFtGC6In592lhu7 wnK8cgyP5cTU+vva9+g6P1wehi4bylXdlKc6mMphbtSA+T3WBNP557+mh3L62l4pGaEGidcZ DLYT2Ud18eAJmxU3HnM8P3iZZgeoK7oqgb53/eg96vkONXNIOwARAQABzSVGZXJuYW5kbyBH b250IDxmZ29udEBzaTZuZXR3b3Jrcy5jb20+wsGBBBMBAgArAhsjBQkSzAMABgsJCAcDAgYV CAIJCgsEFgIDAQIeAQIXgAUCTmylpQIZAQAKCRCuJQ1VHU50kv7wD/9fuNtTfxSLk3B3Hs3p ixTy8YXVjdkVwWlnJjFd7BOWmg7sI+LDhpjGfT6+ddOiwkumnvUZpObodj4ysH0i8c7P4C5t F9yu7WjklSlrB5Rth2CGChg5bKt541z2WHkFFxys9qBLmCSYDeKQkzLqhCjIUJizY2kOJ2GI MnSFDzJjhSFEh//oW830Y8fel1xnf/NVF+lBVtRMtMOfoWUqDjvP3sJ1G4zgkDCnF0CfncLx +hq2Mv26Uq9OTzvLH9aSQQ/f067BOkKAJKsfHdborX4E96ISTz57/4xECRSMr5dVsKVm4Y// uVIsb+L5z+a32FaiBZIAKDgnJO7Z8j6CV5e5yfuBTtX52Yi9HjYYqnYJGSDxYd6igD4bWu+7 xmJPHjkdqZgGV6dQIgiUfqkU+s5Cv350vK48CMaT/ZLo2BdsMhWsmaHmb+waePUMyq6E4E9x 9Js+EJb9ZiCfxS9exgieZQpet1L36IvhiwByvkQM009ywfa30JeMOltUtfLi5V06WQWsTzPL 5C+4cpkguSuAJVDTctjCA0moIeVDOpJ8WH9voQ4IeWapQnX35OIoj1jGJqqYdx65gc1ygbyx b8vw+pJ9E5GLse5TQnYifOWpXzX9053dtbwp/2OVhU4KLlzfCPCEsoTyfu9nIZxdI2PMwiL5 M85BfjX4NmwBLmPGoM7BTQRObKNoARAAqqXCkr250BchRDmi+05F5UQFgylUh10XTAJxBeaQ UNtdxZiZRm6jgomSrqeYtricM9t9K0qb4X2ZXmAMW8o8AYW3RrQHTjcBwMnAKzUIEXXWaLfG cid/ygmvWzIHgMDQKP+MUq1AGQrnvt/MRLvZLyczAV1RTXS58qNaxtaSpc3K/yrDozh/a4pu WcUsVvIkzyx43sqcwamDSBb6U8JFoZizuLXiARLLASgyHrrCedNIZdWSx0z0iHEpZIelA2ih AGLiSMtmtikVEyrJICgO81DkKNCbBbPg+7fi23V6M24+3syHk3IdQibTtBMxinIPyLFF0byJ aGm0fmjefhnmVJyCIl/FDkCHprVhTme57G2/WdoGnUvnT7mcwDRb8XY5nNRkOJsqqLPemKjz kx8mXdQbunXtX9bKyVgd1gIl+LLsxbdzRCch773UBVoortPdK3kMyLtZ4uMeDX3comjx+6VL bztUdJ1Zc9/njwVG8fgmQ+0Kj5+bzQfUY+MmX0HTXIx3B4R1I1a8QoOwi1N+iZNdewV5Zfq+ 29NlQLnVPjCRCKbaz9k6RJ2oIti55YUI6zSsL3lmlOXsRbXN5bRswFczkNSCJxJMlDiyAUIC WOay7ymzvgzPa+BY/mYn94vRaurDQ4/ljOfj6oqgfjts+dJev4Jj89vp8MQI3KJpZPEAEQEA AcLBZQQYAQIADwUCTmyjaAIbDAUJEswDAAAKCRCuJQ1VHU50km4xEACho45PZrUjY4Zl2opR DFNo5a6roTOPpgwO9PcBb3I5F8yX2Dnew+9OhgWXbBhAFq4DCx+9Gjs43Bn60qbZTDbLGJ/m 8N4PwEiq0e5MKceYcbetEdEUWhm5L6psU9ZZ82GR3UGxPXYe+oifEoJjOXQ39avf9S8p3yKP Diil0E79rn7LbJjMcgMLyjFg9SDoJ6pHLtniJoDhEAaSSgeV7Y745+gyMIdtQmrFHfqrFdjq D6G0HE+Z68ywc5KN67YxhvhBmSycs1ZSKAXv1zLDlXdmjHDHkU3xMcB+RkuiTba8yRFYwb/n j62CC4NhFTuIKOc4ta3dJsyXTGh/hO9UjWUnmAGfd0fnzTBZF8Qlnw/8ftx5lt4/O+eqY1EN RITScnPzXE/wMOlTtdkddQ+QN6xt6jyR2XtAIi7aAFHypIqA3lLI9hF9x+lj4UQ2yA9LqpoX 6URpPOd13JhAyDe47cwsP1u9Y+OBvQTVLSvw7Liu2b4KjqL4lx++VdBi7dXsjJ6kjIRjI6Lb WVpxe8LumMCuVDepTafBZ49gr7Fgc4F9ZSCo6ChgQNLn6WDzIkqFX+42KuHz90AHWhuW+KZR 1aJylERWeTcMCGUSBptd48KniWmD6kPKpzwoMkJtEXTuO2lVuborxzwuqOTNuYg9lWDl7zKt wPI9brGzquUHy4qRrA== Message-ID: <8baa1d3d-6bdb-9af6-dc9f-bcc96af3c85d@si6networks.com> Date: Wed, 30 May 2018 20:10:28 +0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [OPSEC] Comments on draft-ietf-opsec-ipv6-eh-filtering X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 May 2018 17:21:17 -0000 Hello, Tom! On 05/29/2018 07:18 PM, Tom Herbert wrote: > Hello, > > There's a couple of drafts that may be relevant to this. > > Section 5.3 of draft-ietf-6man-rfc6434-bis describes how a host may > drop packets that contain to many options in an DO or HBH EH (i.e. a > mitigation against DOS attack). > > draft-ietf-6man-icmp-limits describes ICMP errors that may be sent if > a packet with EH is dropped because it's limits for processing the > extension headers are exceeded. Thanks for the comments! We'll incorporate pointers to these docs in the next rev. Thanks! Best regards, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Wed May 30 20:30:04 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E1FE51315A3 for ; Wed, 30 May 2018 20:30:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.51 X-Spam-Level: X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wHRnqljnVuHW for ; Wed, 30 May 2018 20:29:59 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C81E6131596 for ; Wed, 30 May 2018 20:29:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2432; q=dns/txt; s=iport; t=1527737399; x=1528946999; h=from:to:subject:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=FG4hFxxHNpNAet+cUCNz5vOP5fs01XPEwXY0521abwA=; b=mxckorzdZYefbL/TtLYUp8nGo3z/oMJB+czTMyFzkQjFtxOdE2ro5L9X XdN8oxBnyCG0qoXyK20Bg1rBeDUfcGXZ4SwUXJdLP/msP0wimlig9eZQO 1iWwaLiD4QrIIIsFIshLPmyfQWNIRsKVW7BVPkMTuG0Gb73zRJe0rlIdh k=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DLAADJaw9b/5JdJa1cGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQcBAQEBAYNEYn8oCoNtiASMYYF5gQ+TPIF4CxgLhEkCF4IGITQYAQI?= =?us-ascii?q?BAQEBAQECbBwBC4UoAQEBAwEBASERNwMQCwIBCBgCAiYCAgIlCxUQAgQTgyI?= =?us-ascii?q?CgXcID6YaghyEWINugWMFgQqHM4FUP4EPJIJpgxEBAQMBgVwXgmkwgiQCh0W?= =?us-ascii?q?RIQkChWqIdIE7g3CCYoR/iXGGfQIREwGBJB04gVJwFTsqAYIYixCFPm+OFYE?= =?us-ascii?q?ZAQE?= X-IronPort-AV: E=Sophos;i="5.49,462,1520899200"; d="scan'208";a="400236663" Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 31 May 2018 03:29:58 +0000 Received: from XCH-RCD-020.cisco.com (xch-rcd-020.cisco.com [173.37.102.30]) by rcdn-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id w4V3TwmW007495 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Thu, 31 May 2018 03:29:58 GMT Received: from xch-aln-017.cisco.com (173.36.7.27) by XCH-RCD-020.cisco.com (173.37.102.30) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Wed, 30 May 2018 22:29:58 -0500 Received: from xch-aln-017.cisco.com ([173.36.7.27]) by XCH-ALN-017.cisco.com ([173.36.7.27]) with mapi id 15.00.1320.000; Wed, 30 May 2018 22:29:58 -0500 From: "Darren Dukes (ddukes)" To: "opsec@ietf.org" Thread-Topic: IETF WG state changed for draft-ietf-opsec-ipv6-eh-filtering for 2 weeks Thread-Index: AQHT915GWqTo08UY5EiI+u6439n7O6RJhGCA Date: Thu, 31 May 2018 03:29:58 +0000 Message-ID: <516408AC-9D35-4A31-9A53-E472D080D39E@cisco.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.86.240.82] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [OPSEC] IETF WG state changed for draft-ietf-opsec-ipv6-eh-filtering for 2 weeks X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 May 2018 03:30:02 -0000 U2VjdGlvbiAzLjQuMi41IGNvbnRyYWRpY3RzIHNlY3Rpb24gMy4zIG9uIGhhbmRsaW5nIG9mIHVu a25vd24gUkhU4oCZcy4NClNlY3Rpb24gMy40LjIuNSBjb250cmFkaWN0cyBzZWN0aW9uIDMuNC4y LjQgYXNzZXNzbWVudCBvZiBvcGVyYXRpb25hbCBpbXBhY3QuDQoNCkl0IGFwcGVhcnMgdG8gbWUg dGhhdCAzLjQuMy41IHNob3VsZCBzdGF0ZToNCkludGVybWVkaWF0ZSBzeXN0ZW1zIHNob3VsZCBk aXNjYXJkIHBhY2tldHMgY29udGFpbmluZyBhIFJIVDAgb3INClJIVDEuICBPdGhlciByb3V0aW5n IGhlYWRlciB0eXBlcyBzaG91bGQgYmUgcGVybWl0dGVkLg0KDQpEYXJyZW4NCg0KPiBPbiBNYXkg MjksIDIwMTgsIGF0IDExOjA0IEFNLCBFcmljIFZ5bmNrZSAoZXZ5bmNrZSkgPGV2eW5ja2VAY2lz Y28uY29tPiB3cm90ZToNCj4gDQo+IFtTZW50IHRvIE9QU0VDLCA2TUFOIGFuZCBWNk9QUyBtYWls aW5nIGxpc3RdDQo+IA0KPiBBcyBkaXNjdXNzZWQgYXQgb3VyIGxhc3QgT1NQRUMgV0cgbWVldGlu ZywgdGhpcyBpcyB0byBvcGVuIGEgdHdvLXdlZWsgV0dMQyBmb3I6DQo+ICAgIGh0dHBzOi8vZGF0 YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtb3BzZWMtaXB2Ni1laC1maWx0ZXJpbmcv DQo+IA0KPiBJZiB5b3UgaGF2ZSBub3QgcmVhZCBpdCwgcGxlYXNlIGRvIHNvIG5vdy4gWW91IG1h eSBzZW5kIG5pdHMgdG8gdGhlIGF1dGhvciwgYnV0IHN1YnN0YW50aXZlIGRpc2N1c3Npb24gc2hv dWxkIGdvIHRvIHRoZSBvcHNlY0BpZXRmLm9yZyBsaXN0Lg0KPiANCj4gKFdoaWxlIFY2T1BTICYg Nk1BTiBXRyBhcmUgaW4gY2MgYmVjYXVzZSBvZiBjbG9zZSBhbGlnbm1lbnQgd2l0aCB0aGUgV0cg ZXhwZXJ0aXNlIGFyZWEsIG1heSB3ZSBhc2sgdG8gc2VuZCBmZWVkYmFjayBhbmQgY29tbWVudHMg aW4gdGhlIE9QU0VDIFdHID8pDQo+IA0KPiBXZSB3aWxsIGNsb3NlIHRoZSBjYWxsIG9uIDEyIEp1 bmUgMjAxOC4NCj4gDQo+IEJlc3QgcmVnYXJkcywNCj4gDQo+IC3DqXJpYyAmIC1yb24gKE9QU0VD IFdHIGNvLWNoYWlycykNCj4gDQo+IE9uIDI5LzA1LzE4IDE2OjIxLCAiSUVURiBTZWNyZXRhcmlh dCIgPGlldGYtc2VjcmV0YXJpYXQtcmVwbHlAaWV0Zi5vcmc+IHdyb3RlOg0KPiANCj4gDQo+ICAg IFRoZSBJRVRGIFdHIHN0YXRlIG9mIGRyYWZ0LWlldGYtb3BzZWMtaXB2Ni1laC1maWx0ZXJpbmcg aGFzIGJlZW4gY2hhbmdlZCB0bw0KPiAgICAiSW4gV0cgTGFzdCBDYWxsIiBmcm9tICJXRyBEb2N1 bWVudCIgYnkgw4lyaWMgVnluY2tlOg0KPiANCj4gICAgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRm Lm9yZy9kb2MvZHJhZnQtaWV0Zi1vcHNlYy1pcHY2LWVoLWZpbHRlcmluZy8NCj4gDQo+ICAgIENv bW1lbnQ6DQo+ICAgIFRoZSBjb25zZW5zdXMgYXQgSUVURi0xMDEgbWVldGluZyB3YXMgdGhhdCB0 aGUgZG9jdW1lbnQgaXMgcmVhZHkgZm9yIFdHTEMuDQo+ICAgIFNvLCBsZXQncyBvcGVuIGEgMi13 ZWVrIFdHTEMuDQo+IA0KPiANCj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gSUVURiBJUHY2IHdvcmtpbmcgZ3Jv dXAgbWFpbGluZyBsaXN0DQo+IGlwdjZAaWV0Zi5vcmcNCj4gQWRtaW5pc3RyYXRpdmUgUmVxdWVz dHM6IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaXB2Ng0KPiAtLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLQ0KDQo=