From nobody Thu Feb 4 17:59:43 2016 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 66A791B2C87 for ; Thu, 4 Feb 2016 17:59:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5gWsHUP7RGHM for ; Thu, 4 Feb 2016 17:59:41 -0800 (PST) Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D94C81B2C82 for ; Thu, 4 Feb 2016 17:59:40 -0800 (PST) Received: from [192.168.3.107] (unknown [181.165.125.191]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 97695206A64; Fri, 5 Feb 2016 02:59:38 +0100 (CET) References: <56B401AE.2030105@si6networks.com> To: "'opsec@ietf.org'" From: Fernando Gont X-Forwarded-Message-Id: <56B401AE.2030105@si6networks.com> Message-ID: <56B40204.6070500@si6networks.com> Date: Thu, 4 Feb 2016 22:59:32 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <56B401AE.2030105@si6networks.com> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Subject: [OPSEC] Fwd: Fwd: New Version Notification for draft-gont-opsawg-firewalls-analysis-02.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Feb 2016 01:59:42 -0000 FYI. We expect discussion to happen on the opsawg@ietf.org mailing-list. -------- Forwarded Message -------- Subject: Fwd: New Version Notification for draft-gont-opsawg-firewalls-analysis-02.txt Date: Thu, 4 Feb 2016 22:58:06 -0300 From: Fernando Gont To: opsawg@ietf.org Folks, We have posted a revision of our firewalls document. The revised I-D is available at: Among the changes are: * We have rewritten the intro. * The document clearly states what the goals of this document are. * The document has now a more clear definition of what we mean by "firewall", and is agnostic regarding the specific layer at which the firewall operates (in most of the discussion about firewalls). * Some sections have been augmented. * Minor editorial changes. Your feedback will be appreciated (on the opsawg@ietf.org mailing-list). Thanks! Best regards, Fernando -------- Forwarded Message -------- Subject: New Version Notification for draft-gont-opsawg-firewalls-analysis-02.txt Date: Thu, 04 Feb 2016 16:58:07 -0800 From: internet-drafts@ietf.org To: Fred Baker , Fernando Gont A new version of I-D, draft-gont-opsawg-firewalls-analysis-02.txt has been successfully submitted by Fernando Gont and posted to the IETF repository. Name: draft-gont-opsawg-firewalls-analysis Revision: 02 Title: On Firewalls in Network Security Document date: 2016-02-04 Group: Individual Submission Pages: 19 URL: https://www.ietf.org/internet-drafts/draft-gont-opsawg-firewalls-analysis-02.txt Status: https://datatracker.ietf.org/doc/draft-gont-opsawg-firewalls-analysis/ Htmlized: https://tools.ietf.org/html/draft-gont-opsawg-firewalls-analysis-02 Diff: https://www.ietf.org/rfcdiff?url2=draft-gont-opsawg-firewalls-analysis-02 Abstract: This document analyzes the role of firewalls in network security, and recognizes their role in the internet architecture. It suggests a line of reasoning about their usage, and analyzes common kinds of firewalls and the claims made for them. Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat From nobody Mon Feb 22 00:43:05 2016 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 231FD1B2A0B for ; Mon, 22 Feb 2016 00:42:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xYvLwNRGGmXO for ; Mon, 22 Feb 2016 00:42:05 -0800 (PST) Received: from smtp-fr.alcatel-lucent.com (fr-hpgre-esg-02.alcatel-lucent.com [135.245.210.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CD8E81AD0D0 for ; Mon, 22 Feb 2016 00:42:04 -0800 (PST) Received: from fr711umx2.dmz.alcatel-lucent.com (unknown [135.245.210.39]) by Websense Email Security Gateway with ESMTPS id D227C8ADB97A; Mon, 22 Feb 2016 08:42:00 +0000 (GMT) Received: from fr711usmtp1.zeu.alcatel-lucent.com (fr711usmtp1.zeu.alcatel-lucent.com [135.239.2.122]) by fr711umx2.dmz.alcatel-lucent.com (GMO-o) with ESMTP id u1M8g2Nu027982 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Mon, 22 Feb 2016 08:42:02 GMT Received: from FR711WXCHHUB01.zeu.alcatel-lucent.com (fr711wxchhub01.zeu.alcatel-lucent.com [135.239.2.111]) by fr711usmtp1.zeu.alcatel-lucent.com (GMO) with ESMTP id u1M8g15E006754 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 22 Feb 2016 09:42:02 +0100 Received: from FR711WXCHMBA06.zeu.alcatel-lucent.com ([169.254.2.137]) by FR711WXCHHUB01.zeu.alcatel-lucent.com ([135.239.2.111]) with mapi id 14.03.0195.001; Mon, 22 Feb 2016 09:42:02 +0100 From: "Van De Velde, Gunter (Nokia - BE)" To: "'opsec@ietf.org'" Thread-Topic: IETF95 - Update your drafts & slots requests Thread-Index: AQHRbUzlecwkpKeTo0KMYk7MLfxuoA== Date: Mon, 22 Feb 2016 08:42:01 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [135.239.27.39] Content-Type: multipart/alternative; boundary="_000_F1C36A71D7B042D28EFA86606882DBBCalcatellucentcom_" MIME-Version: 1.0 Archived-At: X-Mailman-Approved-At: Mon, 22 Feb 2016 00:43:03 -0800 Subject: [OPSEC] IETF95 - Update your drafts & slots requests X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Feb 2016 08:42:09 -0000 --_000_F1C36A71D7B042D28EFA86606882DBBCalcatellucentcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgQWxsLA0KDQpJRVRGOTUgaXMgYXBwcm9hY2hpbmcgZmFzdC4gRmlyc3QgaW1wb3J0YW50IGRh dGUgaXMgMjEgTWFyY2gsIGJ5IHdoaWNoIGRyYWZ0cyBuZWVkIHRvIGJlIHVwZGF0ZWQgZm9yIGNv bnN1bXB0aW9uIGR1cmluZyBJRVRGOTUgYWNjb3JkaW5nOg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWVldGluZy9pbXBvcnRhbnQtZGF0ZXMtMjAxNi5odG1sDQoNClRvIGhlbHAgcGxhbiBmb3IgdGhl IElFVEY5NSBPUFNFQyBzbG90IGFnZW5kYSwgY2FuIHdlIGFzayBpZiB5b3Ugd2FudCB0byBkaXNj dXNzIGEgdG9waWMgb3IgZHJhZnQgZHVyaW5nIHRoZSBPUFNFQyBXRyBtZWV0aW5nLg0KDQpLaW5k IFJlZ2FyZHMsDQpHdW50ZXIgJiBFcmljDQoNCg0KDQoNCg== --_000_F1C36A71D7B042D28EFA86606882DBBCalcatellucentcom_ Content-Type: text/html; charset="utf-8" Content-ID: <8B6B3DBD840C494CA4300D1AEA660D30@exchange.lucent.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zaXplOiAx NHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KPGRpdj4NCjxkaXY+SGkg QWxsLDwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+SUVURjk1IGlzIGFwcHJvYWNoaW5n IGZhc3QuIEZpcnN0IGltcG9ydGFudCBkYXRlIGlzIDIxIE1hcmNoLCBieSB3aGljaCBkcmFmdHMg bmVlZCB0byBiZSB1cGRhdGVkIGZvciBjb25zdW1wdGlvbiBkdXJpbmcgSUVURjk1IGFjY29yZGlu Zzo8L2Rpdj4NCjxkaXY+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWVldGluZy9pbXBvcnRhbnQtZGF0 ZXMtMjAxNi5odG1sPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5UbyBoZWxwIHBsYW4g Zm9yIHRoZSBJRVRGOTUgT1BTRUMgc2xvdCBhZ2VuZGEsIGNhbiB3ZSBhc2sgaWYgeW91IHdhbnQg dG8gZGlzY3VzcyBhIHRvcGljIG9yIGRyYWZ0IGR1cmluZyB0aGUgT1BTRUMgV0cgbWVldGluZy48 L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PktpbmQgUmVnYXJkcyw8L2Rpdj4NCjxkaXY+ R3VudGVyICZhbXA7IEVyaWMmbmJzcDs8L2Rpdj4NCjxkaXY+PHNwYW4gc3R5bGU9ImZvbnQtZmFt aWx5OiBDYWxpYnJpOyBmb250LXNpemU6IDEycHQ7Ij4mbmJzcDs8L3NwYW4+PC9kaXY+DQo8ZGl2 Pg0KPGRpdiBpZD0iIj4NCjxkaXYgc3R5bGU9ImNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFt aWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBmb250LXNpemU6IDE0cHg7Ij4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxicj4NCjwvcD4NCjwvZGl2Pg0KPGRpdj48c3BhbiBzdHlsZT0iY29sb3I6IHJn YigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEFyaWFsLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGZv bnQtc2l6ZTogMTJweDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU0LCAyNTQpOyI+PGJy Pg0KPC9zcGFuPjwvZGl2Pg0KPGRpdj48c3BhbiBzdHlsZT0iY29sb3I6IHJnYigwLCAwLCAwKTsg Zm9udC1mYW1pbHk6IEFyaWFsLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGZvbnQtc2l6ZTogMTJw eDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU0LCAyNTQpOyI+PGJyPg0KPC9zcGFuPjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGxpbmsgcmVsPSJGaWxlLUxpc3QiIGhyZWY9 ImZpbGU6Ly9sb2NhbGhvc3QvVXNlcnMvZ3ZhbmRldmUvTGlicmFyeS9Hcm91cCUyMENvbnRhaW5l cnMvVUJGOFQzNDZHOS5PZmZpY2UvbXNvY2xpcDEvMDEvY2xpcF9maWxlbGlzdC54bWwiPjxsaW5r IHJlbD0idGhlbWVEYXRhIiBocmVmPSJmaWxlOi8vbG9jYWxob3N0L1VzZXJzL2d2YW5kZXZlL0xp YnJhcnkvR3JvdXAlMjBDb250YWluZXJzL1VCRjhUMzQ2RzkuT2ZmaWNlL21zb2NsaXAxLzAxL2Ns aXBfdGhlbWVkYXRhLnRobXgiPjxzdHlsZT4NCjwhLS0NCiAvKiBGb250IERlZmluaXRpb25zICov DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkFyaWFsOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIg MiAyIDIgMiA0Ow0KCW1zby1mb250LWNoYXJzZXQ6MDsNCgltc28tZ2VuZXJpYy1mb250LWZhbWls eTphdXRvOw0KCW1zby1mb250LXBpdGNoOnZhcmlhYmxlOw0KCW1zby1mb250LXNpZ25hdHVyZTot NTM2ODU5OTA1IC0xMDczNzExMDM3IDkgMCA1MTEgMDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjAgMCAwIDAgMCAwIDAgMCAwIDA7DQoJbXNv LWZvbnQtY2hhcnNldDoxOw0KCW1zby1nZW5lcmljLWZvbnQtZmFtaWx5OnJvbWFuOw0KCW1zby1m b250LWZvcm1hdDpvdGhlcjsNCgltc28tZm9udC1waXRjaDp2YXJpYWJsZTsNCgltc28tZm9udC1z aWduYXR1cmU6MCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJp Ow0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0Ow0KCW1zby1mb250LWNoYXJzZXQ6MDsN Cgltc28tZ2VuZXJpYy1mb250LWZhbWlseTphdXRvOw0KCW1zby1mb250LXBpdGNoOnZhcmlhYmxl Ow0KCW1zby1mb250LXNpZ25hdHVyZTotNTM2ODcwMTQ1IDEwNzM3ODYxMTEgMSAwIDQxNSAwO30N CiAvKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2 Lk1zb05vcm1hbA0KCXttc28tc3R5bGUtdW5oaWRlOm5vOw0KCW1zby1zdHlsZS1xZm9ybWF0Onll czsNCgltc28tc3R5bGUtcGFyZW50OiIiOw0KCW1hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTou MDAwMXB0Ow0KCW1zby1wYWdpbmF0aW9uOndpZG93LW9ycGhhbjsNCglmb250LXNpemU6MTIuMHB0 Ow0KCWZvbnQtZmFtaWx5OkNhbGlicmk7DQoJbXNvLWFzY2lpLWZvbnQtZmFtaWx5OkNhbGlicmk7 DQoJbXNvLWFzY2lpLXRoZW1lLWZvbnQ6bWlub3ItbGF0aW47DQoJbXNvLWZhcmVhc3QtZm9udC1m YW1pbHk6Q2FsaWJyaTsNCgltc28tZmFyZWFzdC10aGVtZS1mb250Om1pbm9yLWxhdGluOw0KCW1z by1oYW5zaS1mb250LWZhbWlseTpDYWxpYnJpOw0KCW1zby1oYW5zaS10aGVtZS1mb250Om1pbm9y LWxhdGluOw0KCW1zby1iaWRpLWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iOw0KCW1zby1i aWRpLXRoZW1lLWZvbnQ6bWlub3ItYmlkaTt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUt dHlwZTpleHBvcnQtb25seTsNCgltc28tZGVmYXVsdC1wcm9wczp5ZXM7DQoJZm9udC1mYW1pbHk6 Q2FsaWJyaTsNCgltc28tYXNjaWktZm9udC1mYW1pbHk6Q2FsaWJyaTsNCgltc28tYXNjaWktdGhl bWUtZm9udDptaW5vci1sYXRpbjsNCgltc28tZmFyZWFzdC1mb250LWZhbWlseTpDYWxpYnJpOw0K CW1zby1mYXJlYXN0LXRoZW1lLWZvbnQ6bWlub3ItbGF0aW47DQoJbXNvLWhhbnNpLWZvbnQtZmFt aWx5OkNhbGlicmk7DQoJbXNvLWhhbnNpLXRoZW1lLWZvbnQ6bWlub3ItbGF0aW47DQoJbXNvLWJp ZGktZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiI7DQoJbXNvLWJpZGktdGhlbWUtZm9udDpt aW5vci1iaWRpO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjU5NS4wcHQgODQyLjBwdDsN CgltYXJnaW46NzIuMHB0IDcyLjBwdCA3Mi4wcHQgNzIuMHB0Ow0KCW1zby1oZWFkZXItbWFyZ2lu OjM1LjRwdDsNCgltc28tZm9vdGVyLW1hcmdpbjozNS40cHQ7DQoJbXNvLXBhcGVyLXNvdXJjZTow O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+DQo8L3N0eWxl Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_F1C36A71D7B042D28EFA86606882DBBCalcatellucentcom_--