From nobody Wed Oct 19 08:53:54 2016 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DC6CF128874 for ; Wed, 19 Oct 2016 08:53:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.952 X-Spam-Level: X-Spam-Status: No, score=-14.952 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.431, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d3AyAHj4f6OA for ; Wed, 19 Oct 2016 08:53:52 -0700 (PDT) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 833D41295B6 for ; Wed, 19 Oct 2016 08:53:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1488; q=dns/txt; s=iport; t=1476892432; x=1478102032; h=from:to:subject:date:message-id:mime-version; bh=D4c64gFH3lNIhH8Cjag3wJ+sXS8WbU16YbpDtyczrtk=; b=A3UYIWRB7/gmPN8X4rmFaj5etKsQKYBoPQdt68fCk/lo0FiNk0k/Z4KA W4gWrzg00ywrUdrqVQ4JCHrnxTJ6Zos6aHrqIcxMTt74dzSyhx4JrvkAL n11cPoNRZeXmFdkOuWYCZXA64x8D9NKiNy/riKjP8qWI66L/DJsQDc3AJ o=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BDAgB7lgdY/5NdJa1cGwEBAQMBAQEJA?= =?us-ascii?q?QEBgwg2AQEBAQEdgVuNLaYhgwaCD4IIhj2BXz8UAQIBAQEBAQEBYh0LhFkQHQZ?= =?us-ascii?q?oAQsBPgIEMCcEiGWnCY9tjQcBAQgBAQEBI4Y9jCCCWwWaDQGBOo5Pj3mQfQEeN?= =?us-ascii?q?lWEdIgvgQABAQE?= X-IronPort-AV: E=Sophos;i="5.31,367,1473120000"; d="scan'208,217";a="165159381" Received: from rcdn-core-11.cisco.com ([173.37.93.147]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 19 Oct 2016 15:53:51 +0000 Received: from XCH-RTP-011.cisco.com (xch-rtp-011.cisco.com [64.101.220.151]) by rcdn-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id u9JFrp2C027060 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Wed, 19 Oct 2016 15:53:51 GMT Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-011.cisco.com (64.101.220.151) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 19 Oct 2016 11:53:50 -0400 Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1210.000; Wed, 19 Oct 2016 11:53:50 -0400 From: "Eric Vyncke (evyncke)" To: "opsec@ietf.org" Thread-Topic: Call for agenda items for the OPSEC WG Thread-Index: AQHSKiD8wXW/J8Xurkaq6Tk4gRfMiw== Date: Wed, 19 Oct 2016 15:53:50 +0000 Message-ID: Accept-Language: fr-FR, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.3.160329 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.55.56.6] Content-Type: multipart/alternative; boundary="_000_D42D63AC8556Cevynckeciscocom_" MIME-Version: 1.0 Archived-At: Subject: [OPSEC] Call for agenda items for the OPSEC WG X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Oct 2016 15:53:54 -0000 --_000_D42D63AC8556Cevynckeciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QXMgR3VudGVyIGFuZCBJIGFyZSBmaW5hbGlzaW5nIHRoZSBPUFNFQyBXRyBtZWV0aW5nIGluIFNl b3VsIChUaHVyc2RheSBtb3JuaW5nIG5vcm1hbGx5KSwgd2UgYXJlIGxvb2tpbmcgZm9yIGFkZGl0 aW9uYWwgdG9waWMgdG8gYmUgYWRkZWQgb24gdGhlIGFnZW5kYS4NCg0KVGhhbmtzIGZvciBjb21p bmcgYmFjayB0byB1cyAob3IgdG8gdGhlIGxpc3QpDQoNCi3DqXJpYyAmIC1ndW50ZXINCg0KDQo= --_000_D42D63AC8556Cevynckeciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <2CF005248F76DA49BB79D1EE8EDF566D@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zaXplOiAx NHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KPGRpdj5BcyBHdW50ZXIg YW5kIEkgYXJlIGZpbmFsaXNpbmcgdGhlIE9QU0VDIFdHIG1lZXRpbmcgaW4gU2VvdWwgKFRodXJz ZGF5IG1vcm5pbmcgbm9ybWFsbHkpLCB3ZSBhcmUgbG9va2luZyBmb3IgYWRkaXRpb25hbCB0b3Bp YyB0byBiZSBhZGRlZCBvbiB0aGUgYWdlbmRhLjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxk aXY+VGhhbmtzIGZvciBjb21pbmcgYmFjayB0byB1cyAob3IgdG8gdGhlIGxpc3QpPC9kaXY+DQo8 ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj4tw6lyaWMgJmFtcDsgLWd1bnRlcjwvZGl2Pg0KPGRpdj48 YnI+DQo8L2Rpdj4NCjxicj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_D42D63AC8556Cevynckeciscocom_-- From nobody Fri Oct 21 16:22:00 2016 Return-Path: X-Original-To: opsec@ietf.org Delivered-To: opsec@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A3913129575; Fri, 21 Oct 2016 16:21:06 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , X-Test-IDTracker: no X-IETF-IDTracker: 6.36.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147709206666.28214.2721949896891204487.idtracker@ietfa.amsl.com> Date: Fri, 21 Oct 2016 16:21:06 -0700 Archived-At: Cc: opsec@ietf.org Subject: [OPSEC] opsec - Requested session has been scheduled for IETF 97 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.17 List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Oct 2016 23:21:07 -0000 Dear Gunter Van de Velde, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. opsec Session 1 (1:00:00) Friday, Afternoon Session I 1150-1320 Room Name: Grand Ballroom 3 size: 175 --------------------------------------------- Request Information: --------------------------------------------------------- Working Group Name: Operational Security Capabilities for IP Network Infrastructure Area Name: Operations and Management Area Session Requester: Gunter Van de Velde Number of Sessions: 1 Length of Session(s): 1 Hour Number of Attendees: 70 Conflicts to Avoid: First Priority: v6ops sidr 6man Second Priority: opsawg lurk Third Priority: acme homenet plus quic Special Requests: --------------------------------------------------------- From nobody Mon Oct 31 16:43:42 2016 Return-Path: X-Original-To: opsec@ietf.org Delivered-To: opsec@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 6DB21127077; Mon, 31 Oct 2016 16:43:41 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.37.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147795742144.23209.17390007948947357988.idtracker@ietfa.amsl.com> Date: Mon, 31 Oct 2016 16:43:41 -0700 Archived-At: Cc: opsec@ietf.org Subject: [OPSEC] I-D Action: draft-ietf-opsec-ipv6-eh-filtering-02.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.17 List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Oct 2016 23:43:41 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Operational Security Capabilities for IP Network Infrastructure of the IETF. Title : Recommendations on Filtering of IPv6 Packets Containing IPv6 Extension Headers Authors : Fernando Gont Will(Shucheng) Liu Ronald P. Bonica Filename : draft-ietf-opsec-ipv6-eh-filtering-02.txt Pages : 35 Date : 2016-10-31 Abstract: It is common operator practice to mitigate security risks by enforcing appropriate packet filtering. This document analyzes both the general security implications of IPv6 Extension Headers and the specific security implications of each Extension Header and Option type. Additionally, it discusses the operational and interoperability implications of discarding packets based on the IPv6 Extension Headers and IPv6 options they contain. Finally, it provides advice on the filtering of such IPv6 packets at transit routers, for those cases in which such filtering is deemed as necessary. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-opsec-ipv6-eh-filtering/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-opsec-ipv6-eh-filtering-02 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-opsec-ipv6-eh-filtering-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Oct 31 16:45:59 2016 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74E81129ADD; Mon, 31 Oct 2016 16:45:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ov0Jte96pJ_P; Mon, 31 Oct 2016 16:45:55 -0700 (PDT) Received: from gcc01-dm2-obe.outbound.protection.outlook.com (mail-dm2gcc01on0117.outbound.protection.outlook.com [23.103.201.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C2B4127077; Mon, 31 Oct 2016 16:45:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=TEf7KlThQI1z8mjInaRcSuVu5W5YcIl68n8KVw6/CQk=; b=ef+oy6RbpvGNr7KgNJ+XPjMECdTsPMA/mVBrHm4DV7jg02eR5OUaz7FsyKQNCh5ppkkD41Kf1ljwcyQV13+wbHkak6X3qLjrjoNFr5HQhupqGFGKyHekDNmeRsMgmGg8ZJJR/15g80hwXApEUlw/IYVD7SaqyOe/a7PyvcDcrh8= Received: from DM2PR09MB0446.namprd09.prod.outlook.com (10.161.252.145) by MWHPR09MB1437.namprd09.prod.outlook.com (10.173.50.11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.679.12; Mon, 31 Oct 2016 23:45:53 +0000 Received: from DM2PR09MB0446.namprd09.prod.outlook.com ([10.161.252.145]) by DM2PR09MB0446.namprd09.prod.outlook.com ([10.161.252.145]) with mapi id 15.01.0693.009; Mon, 31 Oct 2016 23:45:52 +0000 From: "Sriram, Kotikalapudi (Fed)" To: "opsec@ietf.org" Thread-Topic: New Version Notification for draft-sriram-opsec-urpf-improvements-00.txt Thread-Index: AQHSM88etkmGjBfXIUW9j9DNyV6YsKDDN5/U Date: Mon, 31 Oct 2016 23:45:52 +0000 Message-ID: References: <147795677571.23262.11534083001926974301.idtracker@ietfa.amsl.com> In-Reply-To: <147795677571.23262.11534083001926974301.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=kotikalapudi.sriram@nist.gov; x-originating-ip: [129.6.223.13] x-microsoft-exchange-diagnostics: 1; MWHPR09MB1437; 7:GXPWMWlMTkK3bdOmJUYyht7KPynNFcrlB3W3eime2+yorndlUe35qw8FRSNCmORqeKR61ASgR1W3L1qbuvTx0to34xxI8h5uY/tzdY99l36oaAj3WeITMHF+4lh97i1kCupatk/6F+b1jwOq/9Hu7v7Fxl/DVi9chNHTCtyEwdWBbph7ToOFcLXrlRg1BfSt73SJbAAhzJ07kxMt5JERSAtdoU+eSf9xjcg3vqXn8e6y8AfkB+mLZxIgyNWTuJQJVs97JxTCz9dy+bekgy5uWbeaNcAfxXEN/oMnVwFm0kgCmTrdHluLuNOrog0Og6TPfHDhtRQWIhF4nJL91cVSd8csqRw7kO5Seb+dtchfDrk= x-forefront-antispam-report: SFV:SKI; SCL:-1SFV:NSPM; SFS:(10019020)(6009001)(7916002)(377424004)(199003)(2473002)(377454003)(189002)(7736002)(33656002)(102836003)(86362001)(3846002)(586003)(305945005)(77096005)(3900700001)(92566002)(7846002)(101416001)(87936001)(122556002)(15650500001)(68736007)(5640700001)(66066001)(2501003)(5660300001)(6116002)(8936002)(76576001)(7696004)(3660700001)(450100001)(2906002)(10400500002)(4001150100001)(8676002)(50986999)(110136003)(19580405001)(19580395003)(97736004)(74316002)(54356999)(76176999)(106356001)(2950100002)(6916009)(3280700002)(189998001)(9686002)(15975445007)(105586002)(81156014)(81166006)(4326007)(2900100001)(230783001)(5002640100001)(2351001)(99286002)(106116001)(1730700003); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR09MB1437; H:DM2PR09MB0446.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; x-ms-office365-filtering-correlation-id: 83534da3-b8cc-49aa-48f9-08d401e80ce1 x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:MWHPR09MB1437; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(120809045254105); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026); SRVR:MWHPR09MB1437; BCL:0; PCL:0; RULEID:; SRVR:MWHPR09MB1437; x-forefront-prvs: 01128BA907 received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-originalarrivaltime: 31 Oct 2016 23:45:52.2721 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR09MB1437 Archived-At: Cc: "opsec-chairs@ietf.org" Subject: [OPSEC] Fw: New Version Notification for draft-sriram-opsec-urpf-improvements-00.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Oct 2016 23:45:57 -0000 We (the authors) would like to request comments/suggestions on this draft. We would like to request the chairs for time on the agenda for presenting this work in the Opsec WG meeting in Seoul. Thank you. Sriram ________________________________________ From: internet-drafts@ietf.org Sent: Monday, October 31, 2016 7:32 PM To: Montgomery, Douglas (Fed); Sriram, Kotikalapudi (Fed) Subject: New Version Notification for draft-sriram-opsec-urpf-improvements-= 00.txt A new version of I-D, draft-sriram-opsec-urpf-improvements-00.txt has been successfully submitted by Kotikalapudi Sriram and posted to the IETF repository. Name: draft-sriram-opsec-urpf-improvements Revision: 00 Title: Enhanced Feasible-Path Unicast Reverse Path Filtering Document date: 2016-10-31 Group: Individual Submission Pages: 9 URL: https://www.ietf.org/internet-drafts/draft-sriram-opsec-urp= f-improvements-00.txt Status: https://datatracker.ietf.org/doc/draft-sriram-opsec-urpf-im= provements/ Htmlized: https://tools.ietf.org/html/draft-sriram-opsec-urpf-improve= ments-00 Abstract: This document identifies a need for improvement of the unicast Reverse Path Filtering techniques (uRPF) [BCP84] for source address validation (SAV) [BCP38]. The strict uRPF is inflexible about directionality, the loose uRPF is oblivious to directionality, and the current feasible-path uRPF attempts to strike a balance between the two [BCP84]. However, as shown in this draft, the existing feasible-path uRPF still has short comings. This document proposes an enhanced feasible-path uRPF technique, which aims to be more flexible (in a meaningful way) about directionality than the feasible-path uRPF. It is expected to alleviate ISPs' concerns about the possibility of disrupting service for their customers, and encourage greater deployment of uRPF. Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat From nobody Mon Oct 31 18:49:38 2016 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16F08129BDD; Mon, 31 Oct 2016 18:49:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VRZoiBWTnc8y; Mon, 31 Oct 2016 18:49:35 -0700 (PDT) Received: from mail-pf0-x230.google.com (mail-pf0-x230.google.com [IPv6:2607:f8b0:400e:c00::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 47D25129B20; Mon, 31 Oct 2016 18:49:32 -0700 (PDT) Received: by mail-pf0-x230.google.com with SMTP id s8so85763113pfj.2; Mon, 31 Oct 2016 18:49:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:to:references:cc:from:organization:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=crUP7dd+9l4uV2R3quonw9CtHzWfjAItjbzZ+MbuWbI=; b=PzlaQfl9YORSouUrkp75yJXfbAwT3GbelyLJ9hNilU/kCnyLicKk2cqCKKSY/8lK1L ZV6aYJvbqg88e9Msvh2a8LUsov0IgTj5wQyTOmtwqIJjWUsYUVn/raU1lDpldXXie894 WpsCFo3aM0BgtQllQNkzi/ZG3D21I5bv+tqzB8k/bCw1Xa3IuZLI0f3RMduEMi1RtSlX BuNLJ2d6elFSeca69wAbT61CXqJws+jzQNV3Eo1MY6wfv0JtvNTG+4IKidBQxA2bUAIX 4tQXzubhpldUk+o4VTXq/QCromhZ9A9plMhXMMpg1pRvX9As05qgRj6Zj5q9yko3tlNV UB3A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:cc:from:organization :message-id:date:user-agent:mime-version:in-reply-to :content-transfer-encoding; bh=crUP7dd+9l4uV2R3quonw9CtHzWfjAItjbzZ+MbuWbI=; b=gzljWVl93rZBROG8mVMnkW0TUdM3A/A87yrFSlKtVneROXl3U1ceBT5OUzled/W8iY GSlivF0KU25GozAV4agpv8eeYeef+zptJCsvp6IjZzFRpOEpqemK/wlk6J3+vKokNZOn eVGg9zKHBxsRcqoum4taXk6pZSly0WKJ3+bE88WL87RYVXL+isma6RZnKtFRq9W+Tq+u vezsbhXUQjmu2FlqfE33PcCJN51tvoO9X0oXj3LihFmXMFslxxvcPUW8Mm2pCigMsrkp fLmRIawdjWUU5IT2Nkv8nQJ0BTjVc8QooMlb/NRFUhjvizCts7vZ0Tg8l73v4CaMK9T7 Z7fg== X-Gm-Message-State: ABUngveNim+kmiUz92V8g9fK5DukIeRafxqwIDXPrA9noYZapMscrlxcdfJVyU8RVWdmuw== X-Received: by 10.98.83.70 with SMTP id h67mr54418055pfb.107.1477964971478; Mon, 31 Oct 2016 18:49:31 -0700 (PDT) Received: from ?IPv6:2001:df0:0:2006:c0da:ac17:5f6d:8e76? ([2001:df0:0:2006:c0da:ac17:5f6d:8e76]) by smtp.gmail.com with ESMTPSA id a7sm3677944pfl.87.2016.10.31.18.49.29 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 31 Oct 2016 18:49:31 -0700 (PDT) To: draft-ietf-opsec-ipv6-eh-filtering@ietf.org References: <147795742144.23209.17390007948947357988.idtracker@ietfa.amsl.com> From: Brian E Carpenter Organization: University of Auckland Message-ID: <2454de8a-f9f3-bccf-142f-24969cc06431@gmail.com> Date: Tue, 1 Nov 2016 14:49:31 +1300 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0 MIME-Version: 1.0 In-Reply-To: <147795742144.23209.17390007948947357988.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Cc: opsec@ietf.org Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-ipv6-eh-filtering-02.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Nov 2016 01:49:37 -0000 Hi, I like the new table in section 3.1. However, in the first line (HbH options) the summary "Drop or Ignore" seems misleading. The advice in section 3.4.1.5 is good, and well-balanced. But it's almost impossible to summarise in a few words. Maybe you can fit "Ignore or rate-limit if possible, else drop". Regards Brian Carpenter