From exim@www1.ietf.org Sun Feb 8 23:41:13 2004 Received: from optimus.ietf.org (optimus.ietf.org [132.151.1.19]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id XAA17095 for ; Sun, 8 Feb 2004 23:41:13 -0500 (EST) Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1Aq3Dx-0002Qb-Gb for rpsec-archive@odin.ietf.org; Sun, 08 Feb 2004 23:40:46 -0500 Received: (from exim@localhost) by www1.ietf.org (8.12.8/8.12.8/Submit) id i194ejor009327 for rpsec-archive@odin.ietf.org; Sun, 8 Feb 2004 23:40:45 -0500 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1Aq3Dx-0002QM-Ay for rpsec-web-archive@optimus.ietf.org; Sun, 08 Feb 2004 23:40:45 -0500 Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id XAA17073 for ; Sun, 8 Feb 2004 23:40:42 -0500 (EST) Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 1Aq3Dv-0005rQ-00 for rpsec-web-archive@ietf.org; Sun, 08 Feb 2004 23:40:43 -0500 Received: from exim by ietf-mx with spam-scanned (Exim 4.12) id 1Aq3D1-0005ni-00 for rpsec-web-archive@ietf.org; Sun, 08 Feb 2004 23:39:48 -0500 Received: from optimus.ietf.org ([132.151.1.19]) by ietf-mx with esmtp (Exim 4.12) id 1Aq3CP-0005jj-00 for rpsec-web-archive@ietf.org; Sun, 08 Feb 2004 23:39:09 -0500 Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1Aq3CG-0002Jh-VH; Sun, 08 Feb 2004 23:39:00 -0500 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1Aq3C1-0002JB-QM for rpsec@optimus.ietf.org; Sun, 08 Feb 2004 23:38:45 -0500 Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id XAA17015 for ; Sun, 8 Feb 2004 23:38:42 -0500 (EST) Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 1Aq3Bz-0005iF-00 for rpsec@ietf.org; Sun, 08 Feb 2004 23:38:43 -0500 Received: from exim by ietf-mx with spam-scanned (Exim 4.12) id 1Aq3B4-0005eF-00 for rpsec@ietf.org; Sun, 08 Feb 2004 23:37:46 -0500 Received: from m106.maoz.com ([205.167.76.9]) by ietf-mx with esmtp (Exim 4.12) id 1Aq3Aa-0005aK-00 for rpsec@ietf.org; Sun, 08 Feb 2004 23:37:16 -0500 Received: from m106.maoz.com (localhost.localdomain [127.0.0.1]) by m106.maoz.com (8.12.10/8.12.10) with ESMTP id i194ak3K014787 for ; Sun, 8 Feb 2004 20:36:46 -0800 Received: from localhost (ttauber@localhost) by m106.maoz.com (8.12.10/8.12.10/Submit) with ESMTP id i194ak6H014784 for ; Sun, 8 Feb 2004 20:36:46 -0800 X-Authentication-Warning: m106.maoz.com: ttauber owned process doing -bs Date: Sun, 8 Feb 2004 20:36:46 -0800 (PST) From: Tony Tauber To: rpsec@ietf.org Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Subject: [RPSEC] Meeting in Seoul? Sender: rpsec-admin@ietf.org Errors-To: rpsec-admin@ietf.org X-BeenThere: rpsec@ietf.org X-Mailman-Version: 2.0.12 Precedence: bulk List-Unsubscribe: , List-Id: Routing Protocol Security Requirements List-Post: List-Help: List-Subscribe: , X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on ietf-mx.ietf.org X-Spam-Status: No, hits=0.0 required=5.0 tests=none autolearn=no version=2.60 Greetings all, It's not clear to me that there's much new to discuss or present in Seoul so we haven't requested a meeting time and would need to very soon if there is interest. If you feel there is a need to meet, please contact Russ and me right away. Thanks, Tony _______________________________________________ RPSEC mailing list RPSEC@ietf.org https://www1.ietf.org/mailman/listinfo/rpsec From exim@www1.ietf.org Fri Feb 27 11:55:16 2004 Received: from optimus.ietf.org (optimus.ietf.org [132.151.1.19]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA13623 for ; Fri, 27 Feb 2004 11:55:16 -0500 (EST) Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1AwlGD-00056U-7P for rpsec-archive@odin.ietf.org; Fri, 27 Feb 2004 11:54:49 -0500 Received: (from exim@localhost) by www1.ietf.org (8.12.8/8.12.8/Submit) id i1RGsnvT019612 for rpsec-archive@odin.ietf.org; Fri, 27 Feb 2004 11:54:49 -0500 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1AwlGD-00056F-26 for rpsec-web-archive@optimus.ietf.org; Fri, 27 Feb 2004 11:54:49 -0500 Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA13619 for ; Fri, 27 Feb 2004 11:54:46 -0500 (EST) Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 1AwlGB-0007UR-00 for rpsec-web-archive@ietf.org; Fri, 27 Feb 2004 11:54:47 -0500 Received: from exim by ietf-mx with spam-scanned (Exim 4.12) id 1AwlFH-0007Mu-00 for rpsec-web-archive@ietf.org; Fri, 27 Feb 2004 11:53:52 -0500 Received: from optimus.ietf.org ([132.151.1.19]) by ietf-mx with esmtp (Exim 4.12) id 1AwlEk-0007EX-00 for rpsec-web-archive@ietf.org; Fri, 27 Feb 2004 11:53:18 -0500 Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1AwlET-0004zB-H4; Fri, 27 Feb 2004 11:53:01 -0500 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1AwlED-0004yS-O4 for rpsec@optimus.ietf.org; Fri, 27 Feb 2004 11:52:45 -0500 Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA13476 for ; Fri, 27 Feb 2004 11:52:42 -0500 (EST) Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 1AwlEC-0007Cm-00 for rpsec@ietf.org; Fri, 27 Feb 2004 11:52:44 -0500 Received: from exim by ietf-mx with spam-scanned (Exim 4.12) id 1AwlDS-00072q-00 for rpsec@ietf.org; Fri, 27 Feb 2004 11:51:58 -0500 Received: from prattle.redback.com ([155.53.12.9]) by ietf-mx with esmtp (Exim 4.12) id 1AwlCH-0006o2-00 for rpsec@ietf.org; Fri, 27 Feb 2004 11:50:45 -0500 Received: from localhost (localhost [127.0.0.1]) by prattle.redback.com (Postfix) with ESMTP id 942D77A8CC5 for ; Fri, 27 Feb 2004 08:50:44 -0800 (PST) Received: from prattle.redback.com ([127.0.0.1]) by localhost (prattle [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 19852-08 for ; Fri, 27 Feb 2004 08:50:44 -0800 (PST) Received: from aceeinspiron (unknown [172.31.253.222]) by prattle.redback.com (Postfix) with SMTP id EF3467A8CC6 for ; Fri, 27 Feb 2004 08:50:43 -0800 (PST) Message-ID: <023301c3fd51$d42097f0$0302a8c0@aceeinspiron> From: "Acee Lindem" To: "RPSEC WG List" Date: Fri, 27 Feb 2004 11:50:38 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1158 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 X-Virus-Scanned: by amavisd-new at redback.com Content-Transfer-Encoding: 7bit Subject: [RPSEC] Comments on draft-jones-ospf-vuln-00.txt Sender: rpsec-admin@ietf.org Errors-To: rpsec-admin@ietf.org X-BeenThere: rpsec@ietf.org X-Mailman-Version: 2.0.12 Precedence: bulk List-Unsubscribe: , List-Id: Routing Protocol Security Requirements List-Post: List-Help: List-Subscribe: , X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on ietf-mx.ietf.org X-Spam-Status: No, hits=0.0 required=5.0 tests=AWL autolearn=no version=2.60 Content-Transfer-Encoding: 7bit Content-Transfer-Encoding: 7bit Comments 1. General - Define what you mean by an OSPF routing session or replace it with a generally accepted term. It is not a term from RFC 2328 and appears to be used in more than one context. In some cases it refers to an OSPF routing domain, other cases an OSPF router, and other cases an OSPF adjacency. 2. Page 8, top paragraph. An RFC 2328 compliant router will not consider reflooding the same as originating the LSA itself. So, the statement that the router will not fight back at all is incorrect. Anyway, as we discussed, I believe this sequence is wrong and the check for a self-originated LSA must be done before reflooding the LSA. I know my implemenation does this. 3. Page 8, 3.1.3.2 - You might want to elaborate. Once the network is partitioned the attacker's bogus LSAs will be ignored unless the attacker is able to maintain the real router's adjacencies. 4. Page 8, 3.1.5 - "stub or NSSA areas" rather than "stub areas". 5. Page 10, You should state that any attacks in sections subsequent sections require the no authentication or must be carried out by an inside attacker. 6. Page 10, last paragraph - Actually this is harder than it looks since you also have assure you list all the routers on the network in your bogus hello. However, once you've done that effectively you can keep the network LSA from being originated permanently. 7. Page 11, Paragraph beginning "Finally...". I don't understand what this is getting at, the source would ignore it's replayed hello anyway. So if you replayed an old one that wasn't protected by auth sequence numbers you could still wreck havoc by forcing routers to 1-Way state. 8. Page, Section 3.2.4 - All attacks to LSAs require the orginating router to be in state exchange or higher with a router in the domain. 9. Page 12, 3.2.4.2 - Replace "refreshment" with "refresh". 10. Page 12, 3.2.4.2, Second paragraph. - I'm not sure it makes sense to publish this since most deployed implementations do not have the bug. 11. Page 16, Number of Neighbors on multicast networks - Hello messages are not retained. Rather, a neighbor data structure is created. However, the latter probably requires as much or more resources as the former. 12. Page 16 and page 17 - I'm not sure whether the specific Zebra bugs are relevant. At some point a fragmented packet that is arbitrarily large may be rejected by an implementation. Many times that number is less than 65535 since in practice fragmented IP packets that large are not sent. ------ Acee _______________________________________________ RPSEC mailing list RPSEC@ietf.org https://www1.ietf.org/mailman/listinfo/rpsec From exim@www1.ietf.org Fri Feb 27 17:01:17 2004 Received: from optimus.ietf.org (optimus.ietf.org [132.151.1.19]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA27068 for ; Fri, 27 Feb 2004 17:01:17 -0500 (EST) Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1Awq2M-0000Fv-92 for rpsec-archive@odin.ietf.org; Fri, 27 Feb 2004 17:00:50 -0500 Received: (from exim@localhost) by www1.ietf.org (8.12.8/8.12.8/Submit) id i1RM0ooT000977 for rpsec-archive@odin.ietf.org; Fri, 27 Feb 2004 17:00:50 -0500 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1Awq2L-0000Fg-Tt for rpsec-web-archive@optimus.ietf.org; Fri, 27 Feb 2004 17:00:49 -0500 Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA27047 for ; Fri, 27 Feb 2004 17:00:46 -0500 (EST) Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 1Awq2J-0004cA-00 for rpsec-web-archive@ietf.org; Fri, 27 Feb 2004 17:00:47 -0500 Received: from exim by ietf-mx with spam-scanned (Exim 4.12) id 1Awq1M-0004Tf-00 for rpsec-web-archive@ietf.org; Fri, 27 Feb 2004 16:59:49 -0500 Received: from optimus.ietf.org ([132.151.1.19]) by ietf-mx with esmtp (Exim 4.12) id 1Awq0d-0004Mh-00 for rpsec-web-archive@ietf.org; Fri, 27 Feb 2004 16:59:03 -0500 Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1Awq0a-0008Rk-Pg; Fri, 27 Feb 2004 16:59:00 -0500 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1Awpze-0008P1-Ry for rpsec@optimus.ietf.org; Fri, 27 Feb 2004 16:58:02 -0500 Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA26879 for ; Fri, 27 Feb 2004 16:57:59 -0500 (EST) Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 1Awpzc-0004Ey-00 for rpsec@ietf.org; Fri, 27 Feb 2004 16:58:00 -0500 Received: from exim by ietf-mx with spam-scanned (Exim 4.12) id 1Awpyh-00046i-00 for rpsec@ietf.org; Fri, 27 Feb 2004 16:57:04 -0500 Received: from prattle.redback.com ([155.53.12.9]) by ietf-mx with esmtp (Exim 4.12) id 1Awpy4-0003y2-00 for rpsec@ietf.org; Fri, 27 Feb 2004 16:56:24 -0500 Received: from localhost (localhost [127.0.0.1]) by prattle.redback.com (Postfix) with ESMTP id 8B9955CF626; Fri, 27 Feb 2004 13:56:23 -0800 (PST) Received: from prattle.redback.com ([127.0.0.1]) by localhost (prattle [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 10095-07; Fri, 27 Feb 2004 13:56:23 -0800 (PST) Received: from aceeinspiron (unknown [172.31.253.222]) by prattle.redback.com (Postfix) with SMTP id B0EE45CF625; Fri, 27 Feb 2004 13:56:22 -0800 (PST) Message-ID: <02c401c3fd7c$86762e90$0302a8c0@aceeinspiron> From: "Acee Lindem" To: "OSPF Discussion List" , "RPSEC WG List" Date: Fri, 27 Feb 2004 16:56:16 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1158 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 X-Virus-Scanned: by amavisd-new at redback.com Content-Transfer-Encoding: 7bit Subject: [RPSEC] OSPFv3 Destination Address Filter Sender: rpsec-admin@ietf.org Errors-To: rpsec-admin@ietf.org X-BeenThere: rpsec@ietf.org X-Mailman-Version: 2.0.12 Precedence: bulk List-Unsubscribe: , List-Id: Routing Protocol Security Requirements List-Post: List-Help: List-Subscribe: , X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on ietf-mx.ietf.org X-Spam-Status: No, hits=0.0 required=5.0 tests=AWL autolearn=no version=2.60 Content-Transfer-Encoding: 7bit Content-Transfer-Encoding: 7bit We've implemented the subject draft to mitigate some of the OSPFv3 vulnerabilities. While the solution isn't perfect, it is lightweight, easy to deploy, and fully compatible with the current OSPFv3 specification (RFC 2740). http://www.ietf.org/internet-drafts/draft-lindem-ospfv3-dest-filter-00.txt ------ Acee _______________________________________________ RPSEC mailing list RPSEC@ietf.org https://www1.ietf.org/mailman/listinfo/rpsec