From internet-drafts@ietf.org Mon Nov 5 09:47:54 2012 Return-Path: X-Original-To: savi@ietfa.amsl.com Delivered-To: savi@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B6E221F8442; Mon, 5 Nov 2012 09:47:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.564 X-Spam-Level: X-Spam-Status: No, score=-102.564 tagged_above=-999 required=5 tests=[AWL=0.035, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o4Tz3zRFYQtl; Mon, 5 Nov 2012 09:47:53 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B035321F8431; Mon, 5 Nov 2012 09:47:53 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.35 Message-ID: <20121105174753.21966.16184.idtracker@ietfa.amsl.com> Date: Mon, 05 Nov 2012 09:47:53 -0800 Cc: savi@ietf.org Subject: [savi] I-D Action: draft-ietf-savi-mix-03.txt X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Nov 2012 17:47:54 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Source Address Validation Improvements Wo= rking Group of the IETF. Title : SAVI for Mixed Address Assignment Methods Scenario Author(s) : Jun Bi Guang Yao Joel M. Halpern Eric Levy-Abegnoli Filename : draft-ietf-savi-mix-03.txt Pages : 11 Date : 2012-11-05 Abstract: This document reviews how multiple address discovery methods can coexist in a single SAVI device and collisions are resolved when the same binding entry is discovered by two or more methods. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-savi-mix There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-savi-mix-03 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-savi-mix-03 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From huguangwu@gmail.com Wed Nov 7 06:04:54 2012 Return-Path: X-Original-To: savi@ietfa.amsl.com Delivered-To: savi@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EC23F21F8679 for ; Wed, 7 Nov 2012 06:04:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.098 X-Spam-Level: X-Spam-Status: No, score=-0.098 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, CHARSET_FARAWAY_HEADER=3.2, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nsqLtXgGRASA for ; Wed, 7 Nov 2012 06:04:53 -0800 (PST) Received: from mail-bk0-f44.google.com (mail-bk0-f44.google.com [209.85.214.44]) by ietfa.amsl.com (Postfix) with ESMTP id 301CA21F8742 for ; Wed, 7 Nov 2012 06:04:53 -0800 (PST) Received: by mail-bk0-f44.google.com with SMTP id jc3so754779bkc.31 for ; Wed, 07 Nov 2012 06:04:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=G3Ctnk3lPHeBAy0RxuYkjuPERWRtgkN4vgX6Hgqh1o4=; b=FSB18WO6psLBWuRUERz2pDbJdWw2GFtVU/D7CaGuBzxa9gnmLGLtO1c77TUGMQQ5u3 TD37vKMkEKeXH/Llbj+Qf1SKY5XFr+WjT5p6QtAH8NoCmdfBmwNDxYxxhrrkZj1tUbiP 4EL3AB/MshD8rFgg0aJoXc+kayVr4FCp/abI5sBXlR8JgeRvtHP3HYFowZ4eh6FTvhK0 FIqJGzHy2IbN1CuSkUGQwehNJeconOukL0DrRcWtZNEyOaX3IasLU9aZ196b18Mg+yU1 xmUXlIDNFQSxOMblsZE/eJO4dc1r6tSywU3/bqRpoqSlW56rTkuaATn7J9GSPgOOZXjT 1mhA== MIME-Version: 1.0 Received: by 10.204.129.213 with SMTP id p21mr1136883bks.115.1352297092123; Wed, 07 Nov 2012 06:04:52 -0800 (PST) Received: by 10.204.230.207 with HTTP; Wed, 7 Nov 2012 06:04:52 -0800 (PST) Date: Wed, 7 Nov 2012 22:04:52 +0800 Message-ID: From: =?GB2312?B?tPS5zw==?= To: savi@ietf.org Content-Type: multipart/alternative; boundary=00151758b32cce8c2304cde833cd Subject: [savi] please comment to our new version draft X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Nov 2012 14:04:55 -0000 --00151758b32cce8c2304cde833cd Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Dear Fellows: We just submitted a new version draft named =93A General Framework of Sourc= e Address Validation and Traceback for IPv4/IPv6 Transition Scenarios=94. Give then situation of IPv4/IPv6 transition plans are plenty and few studies have been focus on the IP spoofing issue in transition scenario, we proposed a component-based general framework to try to solve this problem by improving SAVI. Don=92t hesitate to give us any feedback if you are free and interest in th= is topic. The linkable address of this draft is: http://datatracker.ietf.org/doc/draft-xu-savi-transition/?include_text=3D1 Thanks! Authors of this draft with Tsinghua University & China Telecom --00151758b32cce8c2304cde833cd Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: quoted-printable

Dear Fellows:

=A0

We just submitted a new version draft= named =93A General Framework of Source Address Validation and Traceback fo= r IPv4/IPv6 Transition Scenarios=94.

Give then situation of IPv4/IPv6 tran= sition plans are plenty and few studies have been focus on the IP spoofing = issue in transition scenario, we proposed a component-based general framewo= rk to try to solve this problem by improving SAVI.

Don=92t hesitate to give us any feedb= ack if you are free and interest in this topic.

The linkable address of this draft is= :

http://datatracker.ietf.org/doc= /draft-xu-savi-transition/?include_text=3D1

Thanks!

=A0

Authors of this draft with

Tsinghua University & China Telec= om

--00151758b32cce8c2304cde833cd-- From tshbruce@gmail.com Thu Nov 8 03:18:27 2012 Return-Path: X-Original-To: savi@ietfa.amsl.com Delivered-To: savi@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7119B21F8692 for ; Thu, 8 Nov 2012 03:18:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.598 X-Spam-Level: X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6mAgf8bNgbXG for ; Thu, 8 Nov 2012 03:18:27 -0800 (PST) Received: from mail-wg0-f44.google.com (mail-wg0-f44.google.com [74.125.82.44]) by ietfa.amsl.com (Postfix) with ESMTP id B479C21F8683 for ; Thu, 8 Nov 2012 03:18:26 -0800 (PST) Received: by mail-wg0-f44.google.com with SMTP id dr13so1212124wgb.13 for ; Thu, 08 Nov 2012 03:18:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=y3gmbz2/LUKjreV4U46rEN72o9ztCsJuS3N3q9VBeQ4=; b=D/6TK3CJcUlJTD+T2qMgCDNiLLDpG7Zcrp4qU0H2XnPuA6J04jIVqup31Z4PFUyOCN okTPnGvuHlCe5T4NiIgP+2d0MCgdXGkaVwtjkpRX4j7ZEoVnW0MEetAJQ8xmBeCM5zrF DE2wsJyT3r7Gmw6UavSbQbUkiyB7tOoZuhKi+QBKPl8f4QG464NKxIyK9Wkf9dJ7Xrzn XpMroOcTxLjxG1s3q9zxpVse06au21WvJtL5oNOWOO624lh/thfZFc6Tx2un58He6PZH GXAAu4UdJ+0How9dbjk75caSjiIOhTupE+FetxgkmQnhq4+Ookh4NoHFiRgSa/+vTUAn Fj0Q== MIME-Version: 1.0 Received: by 10.181.13.194 with SMTP id fa2mr30027868wid.10.1352373505846; Thu, 08 Nov 2012 03:18:25 -0800 (PST) Received: by 10.194.88.41 with HTTP; Thu, 8 Nov 2012 03:18:25 -0800 (PST) Date: Thu, 8 Nov 2012 19:18:25 +0800 Message-ID: From: Zhu Liang To: savi@ietf.org Content-Type: multipart/alternative; boundary=f46d043d66c56b6d5604cdf9fee3 Subject: [savi] please give us feedback about draft-shi-savi-access-01 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Nov 2012 11:18:27 -0000 --f46d043d66c56b6d5604cdf9fee3 Content-Type: text/plain; charset=GB2312 Content-Transfer-Encoding: quoted-printable Dear fellows=A3=BA this is our new version draft about savi request and solution to ISP IPv6 access network, please give us feedback if you have any comments. The link : http://datatracker.ietf.org/doc/draft-shi-savi-access/ best wishes. Ph.D student Department of Computer Science and Technology Tsinghua University,Beijing,China --f46d043d66c56b6d5604cdf9fee3 Content-Type: text/html; charset=GB2312 Content-Transfer-Encoding: quoted-printable
Dear fellows=A3=BA
   this is our new version draf= t about savi request and solution to ISP IPv6 access network, please give u= s feedback if you have any comments.

best wishes.

Ph.D student
Department of Computer Science and Technology
Tsinghua Univ= ersity,Beijing,China
--f46d043d66c56b6d5604cdf9fee3-- From jeanmichel.combes@gmail.com Wed Nov 28 08:06:54 2012 Return-Path: X-Original-To: savi@ietfa.amsl.com Delivered-To: savi@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 87F9C21F88C9; Wed, 28 Nov 2012 08:06:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.599 X-Spam-Level: X-Spam-Status: No, score=-103.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vU81GbwdBJNo; Wed, 28 Nov 2012 08:06:53 -0800 (PST) Received: from mail-vb0-f44.google.com (mail-vb0-f44.google.com [209.85.212.44]) by ietfa.amsl.com (Postfix) with ESMTP id E2C8821F8821; Wed, 28 Nov 2012 08:06:52 -0800 (PST) Received: by mail-vb0-f44.google.com with SMTP id fc26so6544465vbb.31 for ; Wed, 28 Nov 2012 08:06:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=Fq561Uv544RjXy3tG6gepy0rWKCeDjcRzyghTNbcmA4=; b=ViJyvONAEX0TD3c+ejxWyxeI9+VUyXBdI/ICZ0B7bQkyq/6TA3cVlpJacaQtKAJPdc Q/SYXkaFU82JOSUeO2CK3rx5ACzVK0IxI7pkEJ0QinqTeZ6oyJ2Mjl6z9pbsVZGSWpPn MLYKwbffaG9l5VsHoZ/4ewFkEiCDRDa41GDC40poug1+h4jaVTd0mxRhsvg8TAbJxiHQ vzJiPzN+jWjQxCjuMlTox1n8iFJLdKjww/TGDPvcbydOmBNYjdzMKW3z65zmruWbm2Pn YXOWZdHXcGqn1tQvds+HeSkqcuG62N7qeBGmeO1tIzdNTfa2SeEw5F6kT14N5yWnxUut DIkQ== MIME-Version: 1.0 Received: by 10.52.29.141 with SMTP id k13mr25171647vdh.131.1354118812274; Wed, 28 Nov 2012 08:06:52 -0800 (PST) Received: by 10.221.7.9 with HTTP; Wed, 28 Nov 2012 08:06:52 -0800 (PST) In-Reply-To: <67832B1175062E48926BF3CB27C49B240C8326B7@xmb-aln-x12.cisco.com> References: <67832B1175062E48926BF3CB27C49B240C8326B7@xmb-aln-x12.cisco.com> Date: Wed, 28 Nov 2012 17:06:52 +0100 Message-ID: From: Jean-Michel Combes To: "Gunter Van de Velde (gvandeve)" Content-Type: text/plain; charset=ISO-8859-1 Cc: "dhc@ietf.org" , "opsec@ietf.org" , "savi@ietf.org" , "v6ops v6ops WG \(v6ops@ietf.org\)" Subject: Re: [savi] [OPSEC] Poll for WG adoption of "draft-gont-opsec-dhcpv6-shield" X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Nov 2012 16:06:54 -0000 Hi, >From my point of view, this document doesn't compete with SAVI works (i.e., SAVI goals are to prevent IP address spoofing, using address assignment/management protocols signaling). Now, with DHCP SAVI (cf. https://datatracker.ietf.org/doc/draft-ietf-savi-dhcp/), we have the same feature, but with less details (i.e., process to identify a DHCPv6 message is not described in DHCP SAVI). As I already told during OPSEC meetings, DHCP Shield may be necessary in environment where DHCP SAVI is not deployed. Moreover, DHCP SAVI may use the process described in this document when performing DHCP signaling filtering. Unlike RA Guard, which only provides a mitigation (i.e., if you want a strong security, SEND is the right solution), there is a real need for DHCP Shield because, IMHO, there is no strong security for DHCP signaling today (PSK based security, currently specified, is not usable from a scalability point of view and CGA based security needs that DHCP clients must know the DHCP servers' IP unicast addresses). So, I support the adoption of this document as WG document. Best regards. JMC. 2012/11/27 Gunter Van de Velde (gvandeve) : > Hi folks, > > > > During IETF85 meeting this draft was found useful as WG document by the > OPSEC WG. > > > > This is a call for WG adoption of this work. Please voice your comments in > OPSEC WG email alias. > > > > Latest document: > http://datatracker.ietf.org/doc/draft-gont-opsec-dhcpv6-shield/ > > > > Kind Regards, > > OPSEC chairs > > > _______________________________________________ > OPSEC mailing list > OPSEC@ietf.org > https://www.ietf.org/mailman/listinfo/opsec > From gvandeve@cisco.com Tue Nov 27 04:34:46 2012 Return-Path: X-Original-To: savi@ietfa.amsl.com Delivered-To: savi@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF70A21F84CA; Tue, 27 Nov 2012 04:34:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.597 X-Spam-Level: X-Spam-Status: No, score=-10.597 tagged_above=-999 required=5 tests=[AWL=0.001, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9e0gqJ+5-IwM; Tue, 27 Nov 2012 04:34:46 -0800 (PST) Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) by ietfa.amsl.com (Postfix) with ESMTP id E1D2021F84C7; Tue, 27 Nov 2012 04:34:45 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3506; q=dns/txt; s=iport; t=1354019686; x=1355229286; h=from:to:cc:subject:date:message-id:mime-version; bh=jilI+d7J8hhH5BQ1OYKseTxSsgjdK4brZ32gpHpdPB8=; b=JlEH27V66sOS8q8dGB0dlcyrl/7j+rQDxILQuQJmlu2hCgYJLxSGrIxu B5uCCwLk7nmJfAGK6gETaISpFxE/GL0hm1GvtWoyxNG2bCmCcXwbz0jcE 3zz/vzgCmkexP+aLTArjtl986GGEowVGeaLRrV/e+K749cQQMpa8CKllf 4=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AngLADOytFCtJXG8/2dsb2JhbABEgkmDGbpFgQIHgiABBB0QTBIBDB5WJgEEDg2IBQywGJBMjD6DVWEDlx2PKIJvgWgXHg X-IronPort-AV: E=McAfee;i="5400,1158,6908"; a="146607396" Received: from rcdn-core2-1.cisco.com ([173.37.113.188]) by rcdn-iport-5.cisco.com with ESMTP; 27 Nov 2012 12:34:45 +0000 Received: from xhc-rcd-x01.cisco.com (xhc-rcd-x01.cisco.com [173.37.183.75]) by rcdn-core2-1.cisco.com (8.14.5/8.14.5) with ESMTP id qARCYjPG023820 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Tue, 27 Nov 2012 12:34:45 GMT Received: from xmb-aln-x12.cisco.com ([169.254.7.216]) by xhc-rcd-x01.cisco.com ([173.37.183.75]) with mapi id 14.02.0318.001; Tue, 27 Nov 2012 06:34:44 -0600 From: "Gunter Van de Velde (gvandeve)" To: "opsec@ietf.org" Thread-Topic: Poll for WG adoption of "draft-gont-opsec-dhcpv6-shield" Thread-Index: Ac3Mmyvmk7+I5HczQcyRUdYsnOR6pw== Date: Tue, 27 Nov 2012 12:34:43 +0000 Message-ID: <67832B1175062E48926BF3CB27C49B240C8326B7@xmb-aln-x12.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.61.86.72] Content-Type: multipart/alternative; boundary="_000_67832B1175062E48926BF3CB27C49B240C8326B7xmbalnx12ciscoc_" MIME-Version: 1.0 X-Mailman-Approved-At: Thu, 29 Nov 2012 08:03:34 -0800 Cc: "dhc@ietf.org" , "v6ops v6ops WG \(v6ops@ietf.org\)" , "savi@ietf.org" Subject: [savi] Poll for WG adoption of "draft-gont-opsec-dhcpv6-shield" X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Nov 2012 12:34:46 -0000 --_000_67832B1175062E48926BF3CB27C49B240C8326B7xmbalnx12ciscoc_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi folks, During IETF85 meeting this draft was found useful as WG document by the OPS= EC WG. This is a call for WG adoption of this work. Please voice your comments in = OPSEC WG email alias. Latest document: http://datatracker.ietf.org/doc/draft-gont-opsec-dhcpv6-sh= ield/ Kind Regards, OPSEC chairs --_000_67832B1175062E48926BF3CB27C49B240C8326B7xmbalnx12ciscoc_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi folks,

 

During IETF85 meeting this draft was found useful as= WG document by the OPSEC WG.

 

This is a call for WG adoption of this work. Please = voice your comments in OPSEC WG email alias.

 

Latest document: http://datatracker.ietf.org/doc/dra= ft-gont-opsec-dhcpv6-shield/

 

Kind Regards,

OPSEC chairs

--_000_67832B1175062E48926BF3CB27C49B240C8326B7xmbalnx12ciscoc_--