From nobody Wed Apr 4 12:14:50 2018 Return-Path: X-Original-To: opsec@ietf.org Delivered-To: opsec@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B6FDB12DA6B; Wed, 4 Apr 2018 12:14:48 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: IETF Secretariat To: , , , X-Test-IDTracker: no X-IETF-IDTracker: 6.77.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152286928874.24019.11348808597030240431.idtracker@ietfa.amsl.com> Date: Wed, 04 Apr 2018 12:14:48 -0700 Archived-At: Subject: [OPSEC] The OPSEC WG has placed draft-sriram-opsec-urpf-improvements in state "Call For Adoption By WG Issued" X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Apr 2018 19:14:49 -0000 The OPSEC WG has placed draft-sriram-opsec-urpf-improvements in state Call For Adoption By WG Issued (entered by Éric Vyncke) The document is available at https://datatracker.ietf.org/doc/draft-sriram-opsec-urpf-improvements/ Comment: Humm was in favor for WG adoption in IETF-101, let's open the official mailing-list call for adoption until 18th of April 2018 From nobody Wed Apr 4 12:15:24 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B8CE12E885; Wed, 4 Apr 2018 12:15:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yP2Z53iypTt9; Wed, 4 Apr 2018 12:15:04 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3890E12E051; Wed, 4 Apr 2018 12:15:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4790; q=dns/txt; s=iport; t=1522869304; x=1524078904; h=from:to:cc:subject:date:message-id:mime-version; bh=bc7IQ8TLsTdb6LvLI/t6Q7xOEhzw+JGLJCYFdq91AZ8=; b=SyLHv0G7dnMryWHKttE+D5pE6x+Sx8t5kPhfEqsJVI3I9Hd6eNUc0gn8 SXRRflIVQJx7bpq3mF2jr1zGye+mpTB+YtYMtdPXA2e/B/7eXqabrsK8v 78xdigoNeByNAhBWRFNCnOfguV4kz65hCV9O7y+89nNwfvrYnC6g3QEWh I=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AuAgAjI8Va/49dJa1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYJNdWFvMoNVlQmDA41xhGSBeguFAxyEJiE1FwECAQEBAQEBAmw?= =?us-ascii?q?dC4VGBlYSAQw+AgQwJwQOhC5krCSCHB+EOINsgiWHYoFUP4Euhy6DIzCCJAKXP?= =?us-ascii?q?ggCgTKMfYEyg1mHMY9WAhETAYEkAR4DM4FScBU6KgGCGZBNjUaBFwEB?= X-IronPort-AV: E=Sophos;i="5.48,407,1517875200"; d="scan'208,217";a="374930374" Received: from rcdn-core-7.cisco.com ([173.37.93.143]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 04 Apr 2018 19:15:03 +0000 Received: from XCH-RTP-014.cisco.com (xch-rtp-014.cisco.com [64.101.220.154]) by rcdn-core-7.cisco.com (8.14.5/8.14.5) with ESMTP id w34JF2Jw032149 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 4 Apr 2018 19:15:03 GMT Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-014.cisco.com (64.101.220.154) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Wed, 4 Apr 2018 15:15:02 -0400 Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1320.000; Wed, 4 Apr 2018 15:15:02 -0400 From: "Eric Vyncke (evyncke)" To: "opsec@ietf.org" CC: "draft-sriram-opsec-urpf-improvements@ietf.org" Thread-Topic: Call for WG adoption of draft-sriram-opsec-urpf-improvements Thread-Index: AQHTzEk7CVZbwL5q+kSwn5WrDLjPLA== Date: Wed, 4 Apr 2018 19:15:02 +0000 Message-ID: Accept-Language: fr-FR, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1e.0.170107 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.55.56.7] Content-Type: multipart/alternative; boundary="_000_DDAC669A62E04D71B380105782B06331ciscocom_" MIME-Version: 1.0 Archived-At: Subject: [OPSEC] Call for WG adoption of draft-sriram-opsec-urpf-improvements X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Apr 2018 19:15:16 -0000 --_000_DDAC669A62E04D71B380105782B06331ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QXMgZGlzY3Vzc2VkIGR1cmluZyB0aGUgV0cgbWVldGluZyBpbiBMb25kb24gSUVURi0xMDEsIGxl dCdzIGhhdmUgYSBjYWxsIGZvciBhZG9wdGluZyBkcmFmdC1zcmlyYW0tb3BzZWMtdXJwZi1pbXBy b3ZlbWVudHMgYXMgYW4gT1BTRUMgV29ya2luZyBHcm91cCBkb2N1bWVudC4NCg0KVGhlIGNhbGwg d2lsbCBsYXN0IDIgd2Vla3MgdW50aWwgMTh0aCBvZiBBcHJpbCBpbmNsdWRlZCAoVVRDIG1pZG5p Z2h0KS4NCg0KU28sIHBsZWFzZSByZXBseSB0byB0aGUgbGlzdCB3aGV0aGVyIHlvdSBzdXBwb3J0 IHRoZSBhZG9wdGlvbiBvciBub3QuIE9idmlvdXNseSwgaWYgYWRvcHRlZCwgdGhlbiB0aGUgZG9j dW1lbnQgd2lsbCBwcm9iYWJseSBiZSByZXZpZXdlZCBtb3JlIGV4dGVuc2l2ZWx5IGFuZCBtb2Rp ZmllZC4NCg0KVGhhbmsgeW91IGZvciB5b3VyIHBhcnRpY2lwYXRpb24NCg0KLcOpcmljICYgLXJv bg0KDQo= --_000_DDAC669A62E04D71B380105782B06331ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8N CnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsN CgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWls eTpDYWxpYnJpO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFu LkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZvbnQt ZmFtaWx5OkNhbGlicmk7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLm1zb0lucw0KCXttc28t c3R5bGUtdHlwZTpleHBvcnQtb25seTsNCgltc28tc3R5bGUtbmFtZToiIjsNCgl0ZXh0LWRlY29y YXRpb246dW5kZXJsaW5lOw0KCWNvbG9yOnRlYWw7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0 eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6Q2FsaWJyaTt9DQpAcGFnZSBXb3Jk U2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7DQoJbWFyZ2luOjcyLjBwdCA3Mi4wcHQg NzIuMHB0IDcyLjBwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30N Ci0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBiZ2NvbG9yPSJ3aGl0ZSIgbGFuZz0iRU4tVVMi IGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9u MSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+ QXMgZGlzY3Vzc2VkIGR1cmluZyB0aGUgV0cgbWVldGluZyBpbiBMb25kb24gSUVURi0xMDEsIGxl dCdzIGhhdmUgYSBjYWxsIGZvciBhZG9wdGluZyBkcmFmdC1zcmlyYW0tb3BzZWMtdXJwZi1pbXBy b3ZlbWVudHMgYXMgYW4gT1BTRUMgV29ya2luZyBHcm91cCBkb2N1bWVudC48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlRoZSBjYWxsIHdpbGwgbGFzdCAyIHdlZWtz IHVudGlsIDE4PHN1cD50aDwvc3VwPiBvZiBBcHJpbCBpbmNsdWRlZCAoVVRDIG1pZG5pZ2h0KS48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlNvLCBwbGVhc2UgcmVw bHkgdG8gdGhlIGxpc3Qgd2hldGhlciB5b3Ugc3VwcG9ydCB0aGUgYWRvcHRpb24gb3Igbm90LiBP YnZpb3VzbHksIGlmIGFkb3B0ZWQsIHRoZW4gdGhlIGRvY3VtZW50IHdpbGwgcHJvYmFibHkgYmUg cmV2aWV3ZWQgbW9yZSBleHRlbnNpdmVseSBhbmQgbW9kaWZpZWQuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5UaGFuayB5b3UgZm9yIHlvdXIgcGFydGljaXBhdGlv bjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+LcOpcmljICZhbXA7 IC1yb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_DDAC669A62E04D71B380105782B06331ciscocom_-- From nobody Thu Apr 5 04:11:37 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 28FB612D87F; Thu, 5 Apr 2018 04:11:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id on50fa4d2YTT; Thu, 5 Apr 2018 04:11:34 -0700 (PDT) Received: from mail-wr0-x233.google.com (mail-wr0-x233.google.com [IPv6:2a00:1450:400c:c0c::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 237E412D7ED; Thu, 5 Apr 2018 04:11:31 -0700 (PDT) Received: by mail-wr0-x233.google.com with SMTP id d17so12340181wre.1; Thu, 05 Apr 2018 04:11:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=bI5d5m4ZcbqAaOlzPRJgLkHi4AVhZkrrzAyktac5vh8=; b=M1b+2/ql3vPcUVYZJ4QV1KajwPhCDWoVV2BfNxfplAfUeqxyCpFK3J3eRy27dj+ssT UdVoBUS5nWaL/LCeHqw8pImUS+W4OzFmi9hHGnQPnmatpt9keKItFZ2b4rD46EyImufV tBGgQlHcYe8RcJgnA49iqeXudTIdNBa46b/G1avJKpiTTs9VlhiRGaxAcWQpEAcduffa PxqL8nO9yS3KPNCrTS15NL3rUxczWAPsO5X04dZKXKNQGG7bGMFCjb9rdKYdb5x/73LK 72ggxqFntzOvDqhgO4iaTFm3LfRIVcEbzGMy5HtGr3P8zM4oQBsdLtvhuFqbPtWdq/VM 0igA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=bI5d5m4ZcbqAaOlzPRJgLkHi4AVhZkrrzAyktac5vh8=; b=ebtdk2qHf0zCNDeo22OGwLXx5Rj7gHJlcVdGdRTx6PNqXLkzoHjq3BekqriPh3rE/U /a7/AZxTnBRDiQLTIhKCjpYWxF1JQc9v3NCXNxHaVUph8NpPAQsC4I+FM2vVmneWHARp IMjkuQ23L8TEcVU5RGp+Kbo4ILlB7cJYh8tSQIb3LeZUW6ekn2q3mofF61AvaRIsNLEa ylx7HGl9jZ5AZxKcNBKsLyDd9sCC0xrUeRZokCsD3wIqo9VmOxnR9aZnZbIcMgneONEf 2mGUE/Kb2Ust7bB/SF1hhY230W1TsihlRe0xWu2twMciAhCBrY+Xn7tnFwKRlr7fiYs4 PDNA== X-Gm-Message-State: AElRT7G+k8m/D8/1l9S9HCD0rfIAJn8i+/6cG9v5dt5uT0kV6ORQPwMW zgyLZhm2gziv1sIz++M8uPVHq9ZuKQ2Q+uQWFIc= X-Google-Smtp-Source: AIpwx4/xTNfU3QZ1OJ8WB4eoC/9H7O3yohSJjfvwI9tL24WumKn+9nmqAtNPv5RoH3vraLqd8iL84jYMeVqPaYF6Tko= X-Received: by 10.223.139.206 with SMTP id w14mr16511686wra.169.1522926689223; Thu, 05 Apr 2018 04:11:29 -0700 (PDT) MIME-Version: 1.0 Received: by 10.28.140.75 with HTTP; Thu, 5 Apr 2018 04:11:28 -0700 (PDT) In-Reply-To: References: From: Jean-Michel Combes Date: Thu, 5 Apr 2018 13:11:28 +0200 Message-ID: To: "Eric Vyncke (evyncke)" Cc: "opsec@ietf.org" , "draft-sriram-opsec-urpf-improvements@ietf.org" , aa@qrator.net Content-Type: multipart/alternative; boundary="f403045e9f52548a2a0569180038" Archived-At: Subject: Re: [OPSEC] Call for WG adoption of draft-sriram-opsec-urpf-improvements X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Apr 2018 11:11:36 -0000 --f403045e9f52548a2a0569180038 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi, FYI, as mentioned during opsec WG session, there was a presentation, during grow WG session, about an alternative solution: https://datatracker.ietf.org/meeting/101/materials/slides-101-grow-urpf-reb= oot-00 Best regards, JMC. 2018-04-04 21:15 GMT+02:00 Eric Vyncke (evyncke) : > As discussed during the WG meeting in London IETF-101, let's have a call > for adopting draft-sriram-opsec-urpf-improvements as an OPSEC Working > Group document. > > > > The call will last 2 weeks until 18th of April included (UTC midnight). > > > > So, please reply to the list whether you support the adoption or not. > Obviously, if adopted, then the document will probably be reviewed more > extensively and modified. > > > > Thank you for your participation > > > > -=C3=A9ric & -ron > > > > _______________________________________________ > OPSEC mailing list > OPSEC@ietf.org > https://www.ietf.org/mailman/listinfo/opsec > > --f403045e9f52548a2a0569180038 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi,

FYI, as mentioned during o= psec WG session, there was a presentation, during grow WG session, about an= alternative solution:
https://datatracker.ietf.org/= meeting/101/materials/slides-101-grow-urpf-reboot-00

Best = regards,

JMC.


2018-04-04 21:15 GM= T+02:00 Eric Vyncke (evyncke) <evyncke@cisco.com>:

As discussed during= the WG meeting in London IETF-101, let's have a call for adopting draf= t-sriram-opsec-urpf-improvements as an OPSEC Working Group document.

=C2=A0

The call will last = 2 weeks until 18th of April included (UTC midnight).

=C2=A0

So, please reply to= the list whether you support the adoption or not. Obviously, if adopted, t= hen the document will probably be reviewed more extensively and modified.

=C2=A0

Thank you for your = participation

=C2=A0

-=C3=A9ric & -r= on

=C2=A0


_______________________________________________
OPSEC mailing list
OPSEC@ietf.org
https://www.ietf.org/mailman/listinfo/opsec


--f403045e9f52548a2a0569180038-- From nobody Thu Apr 5 15:30:39 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5817C12DB71 for ; Thu, 5 Apr 2018 15:30:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iuhN1oUsJwUu for ; Thu, 5 Apr 2018 15:30:36 -0700 (PDT) Received: from GCC01-CY1-obe.outbound.protection.outlook.com (mail-cy1gcc01on0124.outbound.protection.outlook.com [23.103.200.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3C7B21267BB for ; Thu, 5 Apr 2018 15:30:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=TPhgz4vWzZGzWJlq7MkmeUYHs336RioeHgPuIkRLunA=; b=v7hMyN51J1TAWeXLhTOqHwMcF1kfWzvJ4n4nblM2i7pBtqdFrItDTRXt+dytBxAiUUl9sCHfJR6xMV/gAW9U1ULSYHotnX6rjFo32pDXeYFY97El6uY6/no366sixSFHfSG+8Vh6KL11RCO1aErKB43WPqSc+wLDyfUk/2H9wBg= Received: from BYAPR09MB2773.namprd09.prod.outlook.com (52.135.224.26) by BYAPR09MB2774.namprd09.prod.outlook.com (52.135.224.27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.631.10; Thu, 5 Apr 2018 22:30:33 +0000 Received: from BYAPR09MB2773.namprd09.prod.outlook.com ([fe80::1c1a:4aa6:2b71:ae00]) by BYAPR09MB2773.namprd09.prod.outlook.com ([fe80::1c1a:4aa6:2b71:ae00%13]) with mapi id 15.20.0631.013; Thu, 5 Apr 2018 22:30:33 +0000 From: "Sriram, Kotikalapudi (Fed)" To: Jean-Michel Combes CC: "opsec@ietf.org" , Alexander Azimov , Jeffrey Haas , "Montgomery, Douglas (Fed)" Thread-Topic: [OPSEC] Call for WG adoption of draft-sriram-opsec-urpf-improvements Thread-Index: AQHTzEk7CVZbwL5q+kSwn5WrDLjPLKPyBR0AgAChgvA= Date: Thu, 5 Apr 2018 22:30:33 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=kotikalapudi.sriram@nist.gov; x-originating-ip: [129.6.140.122] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR09MB2774; 7:oanBABg/xrfJ9hFFmMJ1EqBfM1ACJGng6+5Ltx6pkPEhsDqgcaZhsvbUP7u0sdQ/ZthfPnLe56BFwKc/KwFQzExfJVwQVNvLCkG1M8q6Rz155Cs8AWnax5nJWiGtrEBM+FeD2XJowujS9ULZgRCsVsSVnVe1BHtb8CbR7eDguMmLSnecblXrXvrClRNfpacHs8BRywi4YTHKY6H/FHwsd0yH2SBwNpuMNeGTbd0pfDfL7nrD0mGrMgssCkT3Elym x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: f5fb2456-67e1-4c1d-037c-08d59b44d8bf x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BYAPR09MB2774; x-ms-traffictypediagnostic: BYAPR09MB2774: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040522)(2401047)(5005006)(8121501046)(3002001)(10201501046)(93006095)(93001095)(3231221)(944501327)(52105095)(6055026)(6041310)(20161123560045)(20161123564045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(6072148)(201708071742011); SRVR:BYAPR09MB2774; BCL:0; PCL:0; RULEID:; SRVR:BYAPR09MB2774; x-forefront-prvs: 06339BAE63 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(39860400002)(39380400002)(396003)(366004)(376002)(189003)(199004)(69234005)(6116002)(305945005)(561944003)(7696005)(6506007)(6916009)(8676002)(229853002)(74316002)(316002)(106356001)(186003)(102836004)(8936002)(97736004)(26005)(25786009)(7736002)(99286004)(33656002)(486006)(5660300001)(81166006)(478600001)(2906002)(53936002)(345774005)(2900100001)(14454004)(55016002)(81156014)(105586002)(54906003)(3280700002)(86362001)(446003)(11346002)(6246003)(3846002)(39060400002)(476003)(3660700001)(66066001)(9686003)(68736007)(5250100002)(76176011)(6436002)(107886003)(4326008); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR09MB2774; H:BYAPR09MB2773.namprd09.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) x-microsoft-antispam-message-info: ltLDkUpUQqoOCV1TTdt43DZWiJgezSVU8015uLjyWPgBUeBd0NbzvUzkbJBHbsg4nm5B21CEsStljf4DJpfO2+rBtcvNmEIb2sSpgS4xqqhc7QUdMXUJh7Nzg4aLOoMbEs94ADRQ17vnWl/6Cug5wLVNhtjokSD3795t9tPr1pZBgG8R5JZB6K3g0lAisQS+60w+oPlPWvwJWp1RscTVnclA5E72nnAwbgRxkk5ZmmIdGNMmoV0jVPSnBgcjsxr+/JQvsiO9WJiFdPwfEapJ676Ue/dEp82xOCEs+27wfwmdtsU1ZrmGXxvdh7ggcPrOxiubpJPU/t7LmzgmaHbefaWXxW715Htx4XLOIL08Ex7S6aHymzQR5xtqWQ3jiSeBZQ6BA5DybNSmMmoLFzSgYQGyj4RD4MrRjbcgLyHXWK4= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-Network-Message-Id: f5fb2456-67e1-4c1d-037c-08d59b44d8bf X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Apr 2018 22:30:33.8177 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR09MB2774 Archived-At: Subject: Re: [OPSEC] Call for WG adoption of draft-sriram-opsec-urpf-improvements X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Apr 2018 22:30:38 -0000 SGkgSmVhbiwNCg0KPkZZSSwgYXMgbWVudGlvbmVkIGR1cmluZyBvcHNlYyBXRyBzZXNzaW9uLCB0 aGVyZSB3YXMgYSBwcmVzZW50YXRpb24sIGR1cmluZyBncm93IFdHIHNlc3Npb24sIGFib3V0IGFu IGFsdGVybmF0aXZlIHNvbHV0aW9uDQoNClRoZSBkcmFmdCBpbiBjb25zaWRlcmF0aW9uIChzcmly YW0tb3BzZWMtdXJwZi1pbXByb3ZlbWVudHMpIGhhcyByZWNlaXZlZCBleHRlbnNpdmUgY29tbWVu dHMgDQppbiBPUFNFQyBhbmQgR1JPVyBXR3Mgc2luY2UgTm92ZW1iZXIgMjAxNi4gDQpXZSBoYXZl IGNhcmVmdWxseSByZXZpc2VkIHRoZSBkcmFmdCAoaW4gdmVyc2lvbnMgLTAyIGFuZCAtMDMpIGJh c2VkIG9uIGNvbW1lbnRzIGZyb20gdGhlIHR3byBXR3MuDQpTbyB3ZSBhcmUgb3BlbiBhbmQgZW50 aHVzaWFzdGljIGFib3V0IFdHIGlucHV0cyBhbmQgZmVlZGJhY2suDQoNCldlICh0aGUgYXV0aG9y cyBvbiB0aGlzIGRyYWZ0KSBhcmUgZmFtaWxpYXIgd2l0aCBBbGV4YW5kZXIncyByZWNlbnQgdVJQ RiBwcm9wb3NhbCBhbmQgb3BlbiB0byB0YWxraW5nIHRvIGhpbS4NCldl4oCZbGwgYmUgb3BlbiB0 byBXRyBzdWdnZXN0aW9ucyBvbiBzdWNoIG1hdHRlcnMgYXMgb3VyIHdvcmsgY29udGludWVzIHRv IHByb2dyZXNzLg0KKEJUVywgdGhlcmUgd2FzIGFsc28gYSBwcm9wb3NhbCBpbiBSVEdXRyBtZWV0 aW5nIGF0IElFVEYgMTAxIGJ5IElnb3IgTHViYXNoZXYgKEFrYW1haSkuKSANCg0KVGhhbmsgeW91 IGZvciB5b3VyIGludGVyZXN0IGFuZCBjb21tZW50Lg0KDQpTcmlyYW0gIA0KICANCg0K From nobody Thu Apr 5 16:29:31 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 792B0126FDC for ; Thu, 5 Apr 2018 16:29:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pEwEaPibWqqt for ; Thu, 5 Apr 2018 16:29:28 -0700 (PDT) Received: from mx0b-00190b01.pphosted.com (mx0b-00190b01.pphosted.com [IPv6:2620:100:9005:57f::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C40D91267BB for ; Thu, 5 Apr 2018 16:29:28 -0700 (PDT) Received: from pps.filterd (m0050096.ppops.net [127.0.0.1]) by m0050096.ppops.net-00190b01. (8.16.0.22/8.16.0.22) with SMTP id w35NRVNa021541; Fri, 6 Apr 2018 00:29:26 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : subject : date : message-id : content-type : content-transfer-encoding : mime-version; s=jan2016.eng; bh=EiwjI3nwD67mt1ExbEEQdq1OQPMbP45z4iF3+CyoRR0=; b=BfR1Mis/JQK/g8cDIRdFF/ZZeNbhdqxULgUWe9JXW1mjuKxq/NC30bAefs92bDbQMZtF 1GBXUNYuHVz+pcTsgKqGKMLlpJoC1VwafnGArxh/tmD/XvK8wUuhnSkrpBnxA8VgH8y2 D+EjH4CxyDgaXE7VOFSiZ/GP/qoxZZZUVQcTfRTgDAdnSvr+zfSDEk4JJuGfLgCyOmQJ BlCif0eDTYAL8tC/haaYHu76783j9N6h7uz2FwCmtUxbtRWDvBHGrlSK1T4TNxxS6C1u /5mA0j2MymwR2FFaEkhAiMY2FlTE41VqjT24p9tOr9GUv1j4OBO6IUStrIDCDNme9Y+8 2Q== Received: from prod-mail-ppoint1 (prod-mail-ppoint1.akamai.com [184.51.33.18]) by m0050096.ppops.net-00190b01. with ESMTP id 2h4n5g5kt4-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 06 Apr 2018 00:29:26 +0100 Received: from pps.filterd (prod-mail-ppoint1.akamai.com [127.0.0.1]) by prod-mail-ppoint1.akamai.com (8.16.0.21/8.16.0.21) with SMTP id w35NSjB2001743; Thu, 5 Apr 2018 19:29:24 -0400 Received: from email.msg.corp.akamai.com ([172.27.123.30]) by prod-mail-ppoint1.akamai.com with ESMTP id 2h25nvvdw0-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Thu, 05 Apr 2018 19:29:23 -0400 Received: from USMA1EX-DAG1MB5.msg.corp.akamai.com (172.27.123.105) by usma1ex-dag1mb6.msg.corp.akamai.com (172.27.123.65) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Thu, 5 Apr 2018 19:29:23 -0400 Received: from USMA1EX-DAG1MB5.msg.corp.akamai.com ([172.27.123.105]) by usma1ex-dag1mb5.msg.corp.akamai.com ([172.27.123.105]) with mapi id 15.00.1365.000; Thu, 5 Apr 2018 19:29:23 -0400 From: "Lubashev, Igor" To: "opsec@ietf.org" , Alexander Azimov , Jeffrey Haas , "Montgomery, Douglas (Fed" , Jean-Michel Combes , "Sriram, Kotikalapudi (Fed" Thread-Topic: Re: [OPSEC] Call for WG adoption of draft-sriram-opsec-urpf-improvements Thread-Index: AdPNM1MzYbmMZyl+REKKjp75wpSyawAAipDA Date: Thu, 5 Apr 2018 23:29:22 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.35.87] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2018-04-05_11:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=230 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1804050236 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2018-04-05_11:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=3 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=3 clxscore=1011 lowpriorityscore=0 mlxscore=3 impostorscore=0 mlxlogscore=157 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1804050236 Archived-At: Subject: Re: [OPSEC] Call for WG adoption of draft-sriram-opsec-urpf-improvements X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Apr 2018 23:29:30 -0000 > (BTW, there was also a proposal in RTGWG meeting at IETF 101 by Igor Luba= shev (Akamai).) Thank you for mentioning my proposal. I believe that the two approaches ar= e complimentary. While my proposal attempts to provide a more universal solution to the prob= lem, it requires a BGP update and an implementation by all routers on path = between the initial advertiser and the router performing uRPF. This draft = proposes a solution that can immediately work w/o a change to BGP on the ro= uter that implements it, albeit in a more limited set of circumstances. Therefore, I support the adoption, and I am interested in more discussion i= n this problem area. - Igor From nobody Mon Apr 16 17:00:33 2018 Return-Path: X-Original-To: opsec@ietf.org Delivered-To: opsec@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B59CA12D7E4; Mon, 16 Apr 2018 17:00:26 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: IETF Meeting Session Request Tool To: Cc: warren@kumari.net, opsec@ietf.org, opsec-chairs@ietf.org, evyncke@cisco.com X-Test-IDTracker: no X-IETF-IDTracker: 6.78.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152392322669.26106.6383523855425189462.idtracker@ietfa.amsl.com> Date: Mon, 16 Apr 2018 17:00:26 -0700 Archived-At: Subject: [OPSEC] opsec - New Meeting Session Request for IETF 102 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Apr 2018 00:00:27 -0000 A new meeting session request has just been submitted by Eric Vyncke, a Chair of the opsec working group. --------------------------------------------------------- Working Group Name: Operational Security Capabilities for IP Network Infrastructure Area Name: Operations and Management Area Session Requester: Éric Vyncke Number of Sessions: 1 Length of Session(s): 1.5 Hours Number of Attendees: 70 Conflicts to Avoid: First Priority: 6man v6ops intarea Second Priority: tls opsawg opsarea capport Third Priority: mile People who must be present: Ron Bonica Eric Vyncke Warren Kumari Resources Requested: Special Requests: --------------------------------------------------------- From nobody Mon Apr 16 17:03:29 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AAA8C12D7E4; Mon, 16 Apr 2018 17:03:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.51 X-Spam-Level: X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id luT8lxeM9yl1; Mon, 16 Apr 2018 17:03:25 -0700 (PDT) Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A26AB127241; Mon, 16 Apr 2018 17:03:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=7284; q=dns/txt; s=iport; t=1523923405; x=1525133005; h=from:to:cc:subject:date:message-id:mime-version; bh=HU1D3zdeXKSDjvr/UUZrI8wn893mep1Xt3VcWyseD8M=; b=QAtVPBQy2PwQDBH+AKb0nVsLxt1NCCSO48TfPXewz/zGGMedojz+ciB7 vTBpXMImBcg4X1TbYiTS8fcnmfBmAp1hO/QONEQKfC6iARf9d9qsfoak2 ywSAzS6G8L2/j1j7KUAfdTk63ZQ4Fkwc91c+YI7oQA5mQSCGwUv1SI+OM A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0C3CgBbOdVa/5ldJa1dHAEBAQQBAQo?= =?us-ascii?q?BAYJNdWEXYygKg12VFoFTgTCNfoZlC4UDHIIqITgUAQIBAQEBAQECbB0LhSI?= =?us-ascii?q?BIwZWEgEZAwECKwIEMB0KBA4FhClkphmCHB+EOINqgiWIBoFUP4EyDIJchFB?= =?us-ascii?q?DgmAwgiQCl2QIAo45gTODXIc8j3gCERMBgSQBMyGBUnAVOyoBghiQTm+NFIE?= =?us-ascii?q?XAQE?= X-IronPort-AV: E=Sophos;i="5.48,461,1517875200"; d="scan'208,217";a="164322371" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 17 Apr 2018 00:03:24 +0000 Received: from XCH-RTP-015.cisco.com (xch-rtp-015.cisco.com [64.101.220.155]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id w3H03O25023865 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 17 Apr 2018 00:03:24 GMT Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-015.cisco.com (64.101.220.155) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Mon, 16 Apr 2018 20:03:22 -0400 Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1320.000; Mon, 16 Apr 2018 20:03:22 -0400 From: "Eric Vyncke (evyncke)" To: "opsec@ietf.org" CC: "draft-sriram-opsec-urpf-improvements@ietf.org" Thread-Topic: Reminder: [OPSEC] Call for WG adoption of draft-sriram-opsec-urpf-improvements Thread-Index: AQHT1d9/peV+7TjuGEqTm8rAM7CgNA== Date: Tue, 17 Apr 2018 00:03:22 +0000 Message-ID: <62EC3E74-6837-4E22-B9C8-FD738316DED6@cisco.com> Accept-Language: fr-FR, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1e.0.170107 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.155.40.35] Content-Type: multipart/alternative; boundary="_000_62EC3E7468374E22B9C8FD738316DED6ciscocom_" MIME-Version: 1.0 Archived-At: Subject: [OPSEC] Reminder: Call for WG adoption of draft-sriram-opsec-urpf-improvements X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Apr 2018 00:03:28 -0000 --_000_62EC3E7468374E22B9C8FD738316DED6ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 U3RpbGwgdHdvIGRheXMgdG8gc3RhdGUgd2hldGhlciB5b3Ugd2FudCB0aGlzIEktRCBhZG9wdGVk IGJ5IG91ciBPUFNFQyBXRw0KDQotw6lyaWMgJiAtcm9uDQoNCkZyb206IE9QU0VDIDxvcHNlYy1i b3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2YgRXJpYyBWeW5ja2UgPGV2eW5ja2VAY2lzY28u Y29tPg0KRGF0ZTogV2VkbmVzZGF5IDQgQXByaWwgMjAxOCBhdCAxMjoxNQ0KVG86ICJvcHNlY0Bp ZXRmLm9yZyIgPG9wc2VjQGlldGYub3JnPg0KQ2M6ICJkcmFmdC1zcmlyYW0tb3BzZWMtdXJwZi1p bXByb3ZlbWVudHNAaWV0Zi5vcmciIDxkcmFmdC1zcmlyYW0tb3BzZWMtdXJwZi1pbXByb3ZlbWVu dHNAaWV0Zi5vcmc+DQpTdWJqZWN0OiBbT1BTRUNdIENhbGwgZm9yIFdHIGFkb3B0aW9uIG9mIGRy YWZ0LXNyaXJhbS1vcHNlYy11cnBmLWltcHJvdmVtZW50cw0KDQpBcyBkaXNjdXNzZWQgZHVyaW5n IHRoZSBXRyBtZWV0aW5nIGluIExvbmRvbiBJRVRGLTEwMSwgbGV0J3MgaGF2ZSBhIGNhbGwgZm9y IGFkb3B0aW5nIGRyYWZ0LXNyaXJhbS1vcHNlYy11cnBmLWltcHJvdmVtZW50cyBhcyBhbiBPUFNF QyBXb3JraW5nIEdyb3VwIGRvY3VtZW50Lg0KDQpUaGUgY2FsbCB3aWxsIGxhc3QgMiB3ZWVrcyB1 bnRpbCAxOHRoIG9mIEFwcmlsIGluY2x1ZGVkIChVVEMgbWlkbmlnaHQpLg0KDQpTbywgcGxlYXNl IHJlcGx5IHRvIHRoZSBsaXN0IHdoZXRoZXIgeW91IHN1cHBvcnQgdGhlIGFkb3B0aW9uIG9yIG5v dC4gT2J2aW91c2x5LCBpZiBhZG9wdGVkLCB0aGVuIHRoZSBkb2N1bWVudCB3aWxsIHByb2JhYmx5 IGJlIHJldmlld2VkIG1vcmUgZXh0ZW5zaXZlbHkgYW5kIG1vZGlmaWVkLg0KDQpUaGFuayB5b3Ug Zm9yIHlvdXIgcGFydGljaXBhdGlvbg0KDQotw6lyaWMgJiAtcm9uDQoNCg== --_000_62EC3E7468374E22B9C8FD738316DED6ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <08A08F40340B9B49AF355BBDCB3C5059@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8N CnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsN CgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWls eTpDYWxpYnJpO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFu LkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseTpD YWxpYnJpOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0 eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6Q2FsaWJyaTsNCgljb2xvcjp3 aW5kb3d0ZXh0O30NCnNwYW4ubXNvSW5zDQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0K CW1zby1zdHlsZS1uYW1lOiIiOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7DQoJY29sb3I6 dGVhbDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglm b250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzky LjBwdDsNCgltYXJnaW46NzIuMHB0IDcyLjBwdCA3Mi4wcHQgNzIuMHB0O30NCmRpdi5Xb3JkU2Vj dGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5 IGJnY29sb3I9IndoaXRlIiBsYW5nPSJFTi1VUyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRG NzIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5TdGlsbCB0d28gZGF5cyB0byBzdGF0ZSB3aGV0 aGVyIHlvdSB3YW50IHRoaXMgSS1EIGFkb3B0ZWQgYnkgb3VyIE9QU0VDIFdHPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4tw6lyaWMgJmFtcDsgLXJvbjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHls ZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0I1QzRERiA0LjVwdDtwYWRkaW5nOjBj bSAwY20gMGNtIDQuMHB0O21hcmdpbi1sZWZ0OjMuNzVwdDttYXJnaW4tcmlnaHQ6MGNtIj4NCjxk aXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRk aW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0 eWxlPSJjb2xvcjpibGFjayI+RnJvbTogPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iY29sb3I6Ymxh Y2siPk9QU0VDICZsdDtvcHNlYy1ib3VuY2VzQGlldGYub3JnJmd0OyBvbiBiZWhhbGYgb2YgRXJp YyBWeW5ja2UgJmx0O2V2eW5ja2VAY2lzY28uY29tJmd0Ozxicj4NCjxiPkRhdGU6IDwvYj5XZWRu ZXNkYXkgNCBBcHJpbCAyMDE4IGF0IDEyOjE1PGJyPg0KPGI+VG86IDwvYj4mcXVvdDtvcHNlY0Bp ZXRmLm9yZyZxdW90OyAmbHQ7b3BzZWNAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+Q2M6IDwvYj4mcXVv dDtkcmFmdC1zcmlyYW0tb3BzZWMtdXJwZi1pbXByb3ZlbWVudHNAaWV0Zi5vcmcmcXVvdDsgJmx0 O2RyYWZ0LXNyaXJhbS1vcHNlYy11cnBmLWltcHJvdmVtZW50c0BpZXRmLm9yZyZndDs8YnI+DQo8 Yj5TdWJqZWN0OiA8L2I+W09QU0VDXSBDYWxsIGZvciBXRyBhZG9wdGlvbiBvZiBkcmFmdC1zcmly YW0tb3BzZWMtdXJwZi1pbXByb3ZlbWVudHM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 Ij5BcyBkaXNjdXNzZWQgZHVyaW5nIHRoZSBXRyBtZWV0aW5nIGluIExvbmRvbiBJRVRGLTEwMSwg bGV0J3MgaGF2ZSBhIGNhbGwgZm9yIGFkb3B0aW5nIGRyYWZ0LXNyaXJhbS1vcHNlYy11cnBmLWlt cHJvdmVtZW50cyBhcyBhbiBPUFNFQyBXb3JraW5nIEdyb3VwIGRvY3VtZW50Ljwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+VGhlIGNhbGwgd2lsbCBsYXN0IDIgd2Vl a3MgdW50aWwgMTg8c3VwPnRoPC9zdXA+IG9mIEFwcmlsIGluY2x1ZGVkIChVVEMgbWlkbmlnaHQp Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+U28sIHBsZWFzZSBy ZXBseSB0byB0aGUgbGlzdCB3aGV0aGVyIHlvdSBzdXBwb3J0IHRoZSBhZG9wdGlvbiBvciBub3Qu IE9idmlvdXNseSwgaWYgYWRvcHRlZCwgdGhlbiB0aGUgZG9jdW1lbnQgd2lsbCBwcm9iYWJseSBi ZSByZXZpZXdlZCBtb3JlIGV4dGVuc2l2ZWx5IGFuZCBtb2RpZmllZC48L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlRoYW5rIHlvdSBmb3IgeW91ciBwYXJ0aWNpcGF0 aW9uPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4tw6lyaWMgJmFt cDsgLXJvbjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_62EC3E7468374E22B9C8FD738316DED6ciscocom_-- From nobody Tue Apr 17 06:48:23 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B3F051205F0; Tue, 17 Apr 2018 06:48:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g95sJWXLTyFU; Tue, 17 Apr 2018 06:48:19 -0700 (PDT) Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 367ED12D870; Tue, 17 Apr 2018 06:48:19 -0700 (PDT) Received: from pps.filterd (m0108163.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w3HDl1FF024840; Tue, 17 Apr 2018 06:48:17 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=TH9GxUWTka/7okHO9c3RRlwsxJbo2Ehz4/729RKZIJA=; b=O+2TPzb+3Jva3ChtyinbJbePI5WtXb0RCWjUg0GY7zK3V9pcgJEk7GmKnq/WIpKbZkkf 3ZEFygscWombxapnI7JQ6qYM+RErDuAiUpXKxeqI7wo2DcMEdApZKtavMb/fdI2k06Dk +2EXgldFYUkkEo/58Hq9x+iuGNLkCU1Z/XW85mkMuFfytpUBlcY8yz2D/L44X0AO/Tvi oVAHcQmZr9qKREtOACQjIOJp/r7n+THEmrTGxRJ0Ij3XFLrTH1UFwjiCg9tYe41e2uZf v41km5SwdF8RcnJsp44UiagqBxDRfLLbPGRIPNquc/gnEFr6lO7ZK+vMqs14W8JmoXs1 QQ== Received: from nam02-bl2-obe.outbound.protection.outlook.com (mail-bl2nam02lp0083.outbound.protection.outlook.com [207.46.163.83]) by mx0b-00273201.pphosted.com with ESMTP id 2hdh2ug49j-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 17 Apr 2018 06:48:17 -0700 Received: from SN6PR05MB4240.namprd05.prod.outlook.com (52.135.67.146) by SN6PR05MB4445.namprd05.prod.outlook.com (52.135.74.30) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.696.8; Tue, 17 Apr 2018 13:48:15 +0000 Received: from SN6PR05MB4240.namprd05.prod.outlook.com ([fe80::59a2:13ab:6110:35af]) by SN6PR05MB4240.namprd05.prod.outlook.com ([fe80::59a2:13ab:6110:35af%13]) with mapi id 15.20.0696.011; Tue, 17 Apr 2018 13:48:15 +0000 From: Ron Bonica To: "Eric Vyncke (evyncke)" , "opsec@ietf.org" CC: "draft-sriram-opsec-urpf-improvements@ietf.org" Thread-Topic: [OPSEC] Reminder: Call for WG adoption of draft-sriram-opsec-urpf-improvements Thread-Index: AQHT1d9/peV+7TjuGEqTm8rAM7CgNKQE+WzQ Date: Tue, 17 Apr 2018 13:48:15 +0000 Message-ID: References: <62EC3E74-6837-4E22-B9C8-FD738316DED6@cisco.com> In-Reply-To: <62EC3E74-6837-4E22-B9C8-FD738316DED6@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [66.129.241.14] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR05MB4445; 7:U6WTI500nYi58RLn0F3NiM0+sXrypKgj65Jd/6Wkh82Ce5L5hNbStJUQMkmKbxQjQP8TXF8DU65WyQZlFY67yiQ92Ik8BVA+ijUSf4tLHlOHa+IZZhV+eaJ6lCdPNJF0wr57kjgzxmz2P/7kViz+0EZCNSiutMqAYG2waTc1UlTCxpI5BDCmLLE3L6AJNEpxfP5rPMZiLABArDgKRLFzJCwirdcgypOadfvxpgCrdICZTed6LMYJQ0QL/8bRiMef x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(2017052603328)(7153060)(7193020); SRVR:SN6PR05MB4445; x-ms-traffictypediagnostic: SN6PR05MB4445: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(100405760836317)(95692535739014)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3002001)(3231232)(944501327)(52105095)(10201501046)(93006095)(93001095)(6055026)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123560045)(20161123562045)(20161123558120)(6072148)(201708071742011); SRVR:SN6PR05MB4445; BCL:0; PCL:0; RULEID:; SRVR:SN6PR05MB4445; x-forefront-prvs: 0645BEB7AA x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(39380400002)(346002)(39860400002)(396003)(366004)(189003)(199004)(12213003)(76176011)(790700001)(6116002)(3846002)(86362001)(478600001)(316002)(105586002)(59450400001)(2906002)(6506007)(53546011)(6246003)(110136005)(7696005)(3660700001)(3280700002)(53936002)(9686003)(33656002)(6306002)(54896002)(236005)(102836004)(55016002)(6436002)(99286004)(66066001)(486006)(26005)(106356001)(186003)(229853002)(25786009)(2900100001)(8936002)(97736004)(4326008)(68736007)(5250100002)(11346002)(14454004)(2501003)(476003)(81166006)(5660300001)(81156014)(446003)(7736002)(74316002)(345774005)(8676002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR05MB4445; H:SN6PR05MB4240.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_SN6PR05MB4240AA845A5245E08E49CACAAEB70SN6PR05MB4240namp_" MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: 8b23b5ee-a7d4-473f-ba90-08d5a469de9d X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: 8b23b5ee-a7d4-473f-ba90-08d5a469de9d X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Apr 2018 13:48:15.5568 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR05MB4445 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-04-17_07:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1804170125 Archived-At: Subject: Re: [OPSEC] Reminder: Call for WG adoption of draft-sriram-opsec-urpf-improvements X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Apr 2018 13:48:22 -0000 --_000_SN6PR05MB4240AA845A5245E08E49CACAAEB70SN6PR05MB4240namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Rm9sa3MsDQoNCkFueSBjb21tZW50cywgcG9zaXRpdmUsIG5lZ2F0aXZlIG9yIGluZGlmZmVyZW50 IHdvdWxkIGJlIGFwcHJlY2lhdGVkLiBJdCBpcyBkaWZmaWN1bHQgdG8ganVkZ2UgY29uc2Vuc3Vz IGluIHRoZSBmYWNlIG9mIHNpbGVuY2UuDQoNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIFJvbg0KDQoNCkZyb206IE9QU0VDIDxvcHNlYy1ib3VuY2VzQGlldGYub3Jn PiBPbiBCZWhhbGYgT2YgRXJpYyBWeW5ja2UgKGV2eW5ja2UpDQpTZW50OiBNb25kYXksIEFwcmls IDE2LCAyMDE4IDg6MDMgUE0NClRvOiBvcHNlY0BpZXRmLm9yZw0KQ2M6IGRyYWZ0LXNyaXJhbS1v cHNlYy11cnBmLWltcHJvdmVtZW50c0BpZXRmLm9yZw0KU3ViamVjdDogW09QU0VDXSBSZW1pbmRl cjogQ2FsbCBmb3IgV0cgYWRvcHRpb24gb2YgZHJhZnQtc3JpcmFtLW9wc2VjLXVycGYtaW1wcm92 ZW1lbnRzDQoNClN0aWxsIHR3byBkYXlzIHRvIHN0YXRlIHdoZXRoZXIgeW91IHdhbnQgdGhpcyBJ LUQgYWRvcHRlZCBieSBvdXIgT1BTRUMgV0cNCg0KLcOpcmljICYgLXJvbg0KDQpGcm9tOiBPUFNF QyA8b3BzZWMtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86b3BzZWMtYm91bmNlc0BpZXRmLm9yZz4+ IG9uIGJlaGFsZiBvZiBFcmljIFZ5bmNrZSA8ZXZ5bmNrZUBjaXNjby5jb208bWFpbHRvOmV2eW5j a2VAY2lzY28uY29tPj4NCkRhdGU6IFdlZG5lc2RheSA0IEFwcmlsIDIwMTggYXQgMTI6MTUNClRv OiAib3BzZWNAaWV0Zi5vcmc8bWFpbHRvOm9wc2VjQGlldGYub3JnPiIgPG9wc2VjQGlldGYub3Jn PG1haWx0bzpvcHNlY0BpZXRmLm9yZz4+DQpDYzogImRyYWZ0LXNyaXJhbS1vcHNlYy11cnBmLWlt cHJvdmVtZW50c0BpZXRmLm9yZzxtYWlsdG86ZHJhZnQtc3JpcmFtLW9wc2VjLXVycGYtaW1wcm92 ZW1lbnRzQGlldGYub3JnPiIgPGRyYWZ0LXNyaXJhbS1vcHNlYy11cnBmLWltcHJvdmVtZW50c0Bp ZXRmLm9yZzxtYWlsdG86ZHJhZnQtc3JpcmFtLW9wc2VjLXVycGYtaW1wcm92ZW1lbnRzQGlldGYu b3JnPj4NClN1YmplY3Q6IFtPUFNFQ10gQ2FsbCBmb3IgV0cgYWRvcHRpb24gb2YgZHJhZnQtc3Jp cmFtLW9wc2VjLXVycGYtaW1wcm92ZW1lbnRzDQoNCkFzIGRpc2N1c3NlZCBkdXJpbmcgdGhlIFdH IG1lZXRpbmcgaW4gTG9uZG9uIElFVEYtMTAxLCBsZXQncyBoYXZlIGEgY2FsbCBmb3IgYWRvcHRp bmcgZHJhZnQtc3JpcmFtLW9wc2VjLXVycGYtaW1wcm92ZW1lbnRzIGFzIGFuIE9QU0VDIFdvcmtp bmcgR3JvdXAgZG9jdW1lbnQuDQoNClRoZSBjYWxsIHdpbGwgbGFzdCAyIHdlZWtzIHVudGlsIDE4 dGggb2YgQXByaWwgaW5jbHVkZWQgKFVUQyBtaWRuaWdodCkuDQoNClNvLCBwbGVhc2UgcmVwbHkg dG8gdGhlIGxpc3Qgd2hldGhlciB5b3Ugc3VwcG9ydCB0aGUgYWRvcHRpb24gb3Igbm90LiBPYnZp b3VzbHksIGlmIGFkb3B0ZWQsIHRoZW4gdGhlIGRvY3VtZW50IHdpbGwgcHJvYmFibHkgYmUgcmV2 aWV3ZWQgbW9yZSBleHRlbnNpdmVseSBhbmQgbW9kaWZpZWQuDQoNClRoYW5rIHlvdSBmb3IgeW91 ciBwYXJ0aWNpcGF0aW9uDQoNCi3DqXJpYyAmIC1yb24NCg0K --_000_SN6PR05MB4240AA845A5245E08E49CACAAEB70SN6PR05MB4240namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjoj OTU0RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5tc29ub3JtYWwwLCBsaS5t c29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJ bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjEyLjBwdDsN Cglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUx OA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1z dHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0K CWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNvLXN0eWxlLXR5cGU6 cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29s b3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25s eTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWlu IDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0 aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5 XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4N CjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlv dXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286 c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBiZ2NvbG9yPSJ3 aGl0ZSIgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxkaXYg Y2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtjb2xvcjojMUY0OTdEIj5Gb2xrcyw8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtj b2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtjb2xvcjojMUY0OTdEIj5Bbnkg Y29tbWVudHMsIHBvc2l0aXZlLCBuZWdhdGl2ZSBvciBpbmRpZmZlcmVudCB3b3VsZCBiZSBhcHBy ZWNpYXRlZC4gSXQgaXMgZGlmZmljdWx0IHRvIGp1ZGdlIGNvbnNlbnN1cyBpbiB0aGUgZmFjZSBv ZiBzaWxlbmNlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBSb248bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtjb2xvcjojMUY0 OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9u ZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQi Pg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFF MSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiBPUFNFQyAmbHQ7b3BzZWMtYm91bmNlc0BpZXRmLm9y ZyZndDsNCjxiPk9uIEJlaGFsZiBPZiA8L2I+RXJpYyBWeW5ja2UgKGV2eW5ja2UpPGJyPg0KPGI+ U2VudDo8L2I+IE1vbmRheSwgQXByaWwgMTYsIDIwMTggODowMyBQTTxicj4NCjxiPlRvOjwvYj4g b3BzZWNAaWV0Zi5vcmc8YnI+DQo8Yj5DYzo8L2I+IGRyYWZ0LXNyaXJhbS1vcHNlYy11cnBmLWlt cHJvdmVtZW50c0BpZXRmLm9yZzxicj4NCjxiPlN1YmplY3Q6PC9iPiBbT1BTRUNdIFJlbWluZGVy OiBDYWxsIGZvciBXRyBhZG9wdGlvbiBvZiBkcmFmdC1zcmlyYW0tb3BzZWMtdXJwZi1pbXByb3Zl bWVudHM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+U3RpbGwgdHdvIGRheXMgdG8gc3RhdGUgd2hldGhl ciB5b3Ugd2FudCB0aGlzIEktRCBhZG9wdGVkIGJ5IG91ciBPUFNFQyBXRzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+LcOpcmljICZhbXA7IC1yb248bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNCNUM0REYgNC41cHQ7cGFkZGluZzowaW4g MGluIDBpbiA0LjBwdDttYXJnaW4tbGVmdDozLjc1cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4t cmlnaHQ6MGluO21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7 Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4i Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5Gcm9t OiA8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+T1BTRUMgJmx0OzxhIGhyZWY9 Im1haWx0bzpvcHNlYy1ib3VuY2VzQGlldGYub3JnIj5vcHNlYy1ib3VuY2VzQGlldGYub3JnPC9h PiZndDsgb24gYmVoYWxmIG9mIEVyaWMgVnluY2tlICZsdDs8YSBocmVmPSJtYWlsdG86ZXZ5bmNr ZUBjaXNjby5jb20iPmV2eW5ja2VAY2lzY28uY29tPC9hPiZndDs8YnI+DQo8Yj5EYXRlOiA8L2I+ V2VkbmVzZGF5IDQgQXByaWwgMjAxOCBhdCAxMjoxNTxicj4NCjxiPlRvOiA8L2I+JnF1b3Q7PGEg aHJlZj0ibWFpbHRvOm9wc2VjQGlldGYub3JnIj5vcHNlY0BpZXRmLm9yZzwvYT4mcXVvdDsgJmx0 OzxhIGhyZWY9Im1haWx0bzpvcHNlY0BpZXRmLm9yZyI+b3BzZWNAaWV0Zi5vcmc8L2E+Jmd0Ozxi cj4NCjxiPkNjOiA8L2I+JnF1b3Q7PGEgaHJlZj0ibWFpbHRvOmRyYWZ0LXNyaXJhbS1vcHNlYy11 cnBmLWltcHJvdmVtZW50c0BpZXRmLm9yZyI+ZHJhZnQtc3JpcmFtLW9wc2VjLXVycGYtaW1wcm92 ZW1lbnRzQGlldGYub3JnPC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmRyYWZ0LXNyaXJh bS1vcHNlYy11cnBmLWltcHJvdmVtZW50c0BpZXRmLm9yZyI+ZHJhZnQtc3JpcmFtLW9wc2VjLXVy cGYtaW1wcm92ZW1lbnRzQGlldGYub3JnPC9hPiZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+W09Q U0VDXSBDYWxsIGZvciBXRyBhZG9wdGlvbiBvZiBkcmFmdC1zcmlyYW0tb3BzZWMtdXJwZi1pbXBy b3ZlbWVudHM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFu JnF1b3Q7LHNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5BcyBkaXNjdXNz ZWQgZHVyaW5nIHRoZSBXRyBtZWV0aW5nIGluIExvbmRvbiBJRVRGLTEwMSwgbGV0J3MgaGF2ZSBh IGNhbGwgZm9yIGFkb3B0aW5nIGRyYWZ0LXNyaXJhbS1vcHNlYy11cnBmLWltcHJvdmVtZW50cyBh cyBhbiBPUFNFQyBXb3JraW5nIEdyb3VwIGRvY3VtZW50Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdCI+VGhlIGNhbGwgd2lsbCBsYXN0IDIgd2Vla3MgdW50aWwgMTg8 c3VwPnRoPC9zdXA+IG9mIEFwcmlsIGluY2x1ZGVkIChVVEMgbWlkbmlnaHQpLjwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+U28sIHBsZWFzZSByZXBseSB0byB0aGUg bGlzdCB3aGV0aGVyIHlvdSBzdXBwb3J0IHRoZSBhZG9wdGlvbiBvciBub3QuIE9idmlvdXNseSwg aWYgYWRvcHRlZCwgdGhlbiB0aGUgZG9jdW1lbnQgd2lsbCBwcm9iYWJseSBiZSByZXZpZXdlZCBt b3JlIGV4dGVuc2l2ZWx5IGFuZCBtb2RpZmllZC48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQiPlRoYW5rIHlvdSBmb3IgeW91ciBwYXJ0aWNpcGF0aW9uPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4tw6lyaWMgJmFtcDsgLXJvbjwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Jsb2NrcXVvdGU+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_SN6PR05MB4240AA845A5245E08E49CACAAEB70SN6PR05MB4240namp_-- From nobody Tue Apr 17 08:23:06 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6AE6B12D94E for ; Tue, 17 Apr 2018 08:23:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZVah7YMvQQSN for ; Tue, 17 Apr 2018 08:22:58 -0700 (PDT) Received: from GCC01-DM2-obe.outbound.protection.outlook.com (mail-dm2gcc01on0094.outbound.protection.outlook.com [23.103.201.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 06B3712D94B for ; Tue, 17 Apr 2018 08:22:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=qeWAHoD2J/XRT2M7TiVnEGL/E1Gg3QUG5e1B2xvBiAI=; b=u0YbZ2UmVFwjmaclyghFNfQ2MXgZk248OGX3lqgbw/gBHYe88yyWX0MoA6f1ZlkWDdAkHFuc6uIeYOHq+rgqwdqjukLRatCRcYGr6DTMliznVs4Y/BjwzjCjj/h8eybrz3Ljd+piXN/spXQraE7IKOOvhpZwHRHBaY+/JY8EJf8= Received: from BN6PR09MB2131.namprd09.prod.outlook.com (10.173.160.147) by BN6PR09MB2131.namprd09.prod.outlook.com (10.173.160.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.696.12; Tue, 17 Apr 2018 15:22:56 +0000 Received: from BN6PR09MB2131.namprd09.prod.outlook.com ([fe80::dc7c:7e83:4c15:a753]) by BN6PR09MB2131.namprd09.prod.outlook.com ([fe80::dc7c:7e83:4c15:a753%5]) with mapi id 15.20.0696.011; Tue, 17 Apr 2018 15:22:56 +0000 From: "Borchert, Oliver (Fed)" To: "opsec@ietf.org" Thread-Topic: [OPSEC] Call for WG adoption of draft-sriram-opsec-urpf-improvements Thread-Index: AQHT1l/2xIQlXPANVUGW8bbuqZ+5eg== Date: Tue, 17 Apr 2018 15:22:56 +0000 Message-ID: <0E45966D-E2F1-471A-9291-E683405B3417@nist.gov> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.c.0.180410 authentication-results: spf=none (sender IP is ) smtp.mailfrom=oliver.borchert@nist.gov; x-originating-ip: [2610:20:6222:140:d563:b5a0:6e08:30c5] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BN6PR09MB2131; 7:LLE0Dw0tzML76H1R3oXc+R9a+oQ9dLmKK+E5tb4Ob2KJNl5uqnRdk/efkV0rAKX5P6ooVxCaQPPLWu4CjW8vxWe5glqIQvnwL628iDNv9ZyZOwantLJDfV0YEqNdF4k0uCicfthUwApgjFq2JjXK3CCCDJPabdA7G7S6RYf3PTR/OSTzm2iFv8Sx0YZbtyAH3w/UhjoOya5PYJ4px9HBWvm0OeRmu38C/QUKNn+wobmvzqg/IzNtJhNzgVfFf+mr x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BN6PR09MB2131; x-ms-traffictypediagnostic: BN6PR09MB2131: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040522)(2401047)(8121501046)(5005006)(93006095)(93001095)(3231232)(944501327)(52105095)(10201501046)(3002001)(6055026)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(20161123564045)(20161123558120)(6072148)(201708071742011); SRVR:BN6PR09MB2131; BCL:0; PCL:0; RULEID:; SRVR:BN6PR09MB2131; x-forefront-prvs: 0645BEB7AA x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(376002)(346002)(396003)(39380400002)(39860400002)(189003)(199004)(6512007)(54896002)(6306002)(478600001)(229853002)(186003)(316002)(2351001)(5640700003)(99286004)(6916009)(6246003)(68736007)(476003)(33656002)(6506007)(97736004)(2616005)(53936002)(58126008)(6116002)(105586002)(486006)(46003)(36756003)(2906002)(3660700001)(3280700002)(5250100002)(82746002)(6486002)(2501003)(6436002)(14454004)(25786009)(83716003)(558084003)(5660300001)(86362001)(2900100001)(81156014)(81166006)(7736002)(1730700003)(8936002)(8676002)(102836004)(106356001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN6PR09MB2131; H:BN6PR09MB2131.namprd09.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) x-microsoft-antispam-message-info: ffyFDYws6O87cUraB9SDYiXkvFNulf+kt1TyEs3REZVabqauk2t1gJwPu+PavutkGvM2GLvbBgCt0CFJqmmxXx9xq9Rk2EMB1/EdUkE1Btlv37TwNnmIGKQm9UPluQpCgsZtaIa7X8E2wKaPVWt1cp0rU0FQjeRfnvWeVXjcdc4ywSpInAgQYjzrpCVe9klS spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_0E45966DE2F1471A9291E683405B3417nistgov_" MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: 608d894d-9c0e-4f4d-ce53-08d5a47718c8 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-Network-Message-Id: 608d894d-9c0e-4f4d-ce53-08d5a47718c8 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Apr 2018 15:22:56.4808 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR09MB2131 Archived-At: Subject: Re: [OPSEC] Call for WG adoption of draft-sriram-opsec-urpf-improvements X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Apr 2018 15:23:00 -0000 --_000_0E45966DE2F1471A9291E683405B3417nistgov_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBzdXBwb3J0IHRoZSBhZG9wdGlvbiBvZiBkcmFmdC1zcmlyYW0tb3BzZWMtdXJwZi1pbXByb3Zl bWVudHMgYXMgYW4gT1BTRUMgV29ya2luZyBHcm91cCBkb2N1bWVudCwNCg0KT2xpdmVyDQo= --_000_0E45966DE2F1471A9291E683405B3417nistgov_ Content-Type: text/html; charset="utf-8" Content-ID: <90CF5DD789F3324285242D3B864A58F4@namprd09.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OlRpbWVzOw0K CXBhbm9zZS0xOjIgMCA1IDAgMCAwIDAgMCAwIDA7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8N CnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsN CgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWls eToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21z by1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1 bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojOTU0RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRl cmxpbmU7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTcNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtY29t cG9zZTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0 ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtz aXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2 LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPg0KPC9oZWFk Pg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxk aXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdCI+SSBzdXBwb3J0IHRoZSBhZG9wdGlvbiBvZiA8L3NwYW4+DQo8 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpUaW1lcztjb2xvcjpibGFj aztiYWNrZ3JvdW5kOndoaXRlIj5kcmFmdC1zcmlyYW0tb3BzZWMtdXJwZi1pbXByb3ZlbWVudHM8 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPg0KPC9zcGFuPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0Ij5hcyBhbiBPUFNFQyBXb3JraW5nIEdyb3VwIGRvY3VtZW50LDwv c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0Ij5PbGl2ZXI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_0E45966DE2F1471A9291E683405B3417nistgov_-- From nobody Tue Apr 17 12:21:37 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B0F212025C for ; Tue, 17 Apr 2018 12:21:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ViCYhjLRt3cR for ; Tue, 17 Apr 2018 12:21:34 -0700 (PDT) Received: from smtp121.iad3a.emailsrvr.com (smtp121.iad3a.emailsrvr.com [173.203.187.121]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E17641241F5 for ; Tue, 17 Apr 2018 12:21:33 -0700 (PDT) Received: from smtp24.relay.iad3a.emailsrvr.com (localhost [127.0.0.1]) by smtp24.relay.iad3a.emailsrvr.com (SMTP Server) with ESMTP id 115B224C8F; Tue, 17 Apr 2018 15:21:29 -0400 (EDT) X-Auth-ID: bgreene@senki.org Received: by smtp24.relay.iad3a.emailsrvr.com (Authenticated sender: bgreene-AT-senki.org) with ESMTPSA id 1F44C24D84; Tue, 17 Apr 2018 15:21:26 -0400 (EDT) X-Sender-Id: bgreene@senki.org Received: from [10.101.0.130] (58-84-236-175.nzwireless.co.nz [58.84.236.175]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384) by 0.0.0.0:587 (trex/5.7.12); Tue, 17 Apr 2018 15:21:29 -0400 Content-Type: multipart/alternative; boundary=Apple-Mail-85691C37-172E-4600-B439-97067E82C357 Mime-Version: 1.0 (1.0) From: Barry Raveendran Greene X-Mailer: iPad Mail (15E216) In-Reply-To: Date: Wed, 18 Apr 2018 07:21:22 +1200 Cc: "Eric Vyncke (evyncke)" , "opsec@ietf.org" , "draft-sriram-opsec-urpf-improvements@ietf.org" Content-Transfer-Encoding: 7bit Message-Id: References: <62EC3E74-6837-4E22-B9C8-FD738316DED6@cisco.com> To: Ron Bonica Archived-At: Subject: Re: [OPSEC] Reminder: Call for WG adoption of draft-sriram-opsec-urpf-improvements X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Apr 2018 19:21:36 -0000 --Apple-Mail-85691C37-172E-4600-B439-97067E82C357 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable > On Apr 18, 2018, at 01:48, Ron Bonica wrote: >=20 > Any comments, positive, negative or indifferent would be appreciated. It i= s difficult to judge consensus in the face of silence. Since you asked. Feasible path was build around the capabilities of Juniper=E2= =80=99s FIB structure. Strict Mode, Loose Mode, and VRF Mode all used a more= general approach. My question for working group adoption would be if the ap= proach is applicable to vendors outside of Juniper. Is this possible on Cisc= o, Huawei, Nokia, Arista, and others? If yes, then it is a good for working g= roup adoption. --Apple-Mail-85691C37-172E-4600-B439-97067E82C357 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable


On Apr 1= 8, 2018, at 01:48, Ron Bonica <rbo= nica@juniper.net> wrote:

Any comments, positive, negative or indifferent would be appreciated. I= t is difficult to judge consensus in the face of silence.


Since you asked. Feasible path was build around the capa= bilities of Juniper=E2=80=99s FIB structure. Strict Mode, Loose Mode, and VR= F Mode all used a more general approach. My question for working group adopt= ion would be if the approach is applicable to vendors outside of Juniper. Is= this possible on Cisco, Huawei, Nokia, Arista, and others? If yes, then it i= s a good for working group adoption.


= --Apple-Mail-85691C37-172E-4600-B439-97067E82C357-- From nobody Tue Apr 17 12:50:17 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EFBB7126D73; Tue, 17 Apr 2018 12:50:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id twvfKRkVuNwG; Tue, 17 Apr 2018 12:50:12 -0700 (PDT) Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9D6F9126CF6; Tue, 17 Apr 2018 12:50:12 -0700 (PDT) Received: from pps.filterd (m0108161.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w3HJj181020197; Tue, 17 Apr 2018 12:50:11 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=XdY154ynpks1PH481GZ+a+VijemkSO0oiugrpsZqzjk=; b=f1cUf6c4NrRwgqa9EDEo3x4jhma01vU2fHruk2/s8Fj46xQ8E0BOsmFNSRF6LTpgOXwT BLBe22cvnUTCEBpJY4WhuY2Ife2gBMm0TDCa8wBQnNUUo1mS1Ks0cdWm2CrT+c2IiHH5 CBNTZbxJrRXhFfE3tFpyibIGdCfv+naUhwvn1EJ/gC2Xm6cncY4WLSHjSg9O3iCQoKd4 +F1Od4Ef3Ksz6hodFO40MMmL/ifIWwPK3gWzmwPYmjP9b+YhN6fZivSLtktwczfVYl3i deMvTuAM2i/iqHXBanMpxcszZ9sQt58ggh5x2e28tDLOHcfuIjAqVCtaCCFvE94HgVPP Uw== Received: from nam01-by2-obe.outbound.protection.outlook.com (mail-by2nam01lp0183.outbound.protection.outlook.com [216.32.181.183]) by mx0b-00273201.pphosted.com with ESMTP id 2hdn638b15-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 17 Apr 2018 12:50:11 -0700 Received: from MWHPR05MB3183.namprd05.prod.outlook.com (10.173.229.138) by MWHPR05MB3357.namprd05.prod.outlook.com (10.174.175.142) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.696.8; Tue, 17 Apr 2018 19:50:04 +0000 Received: from MWHPR05MB3183.namprd05.prod.outlook.com ([fe80::99de:815c:1ca6:c43b]) by MWHPR05MB3183.namprd05.prod.outlook.com ([fe80::99de:815c:1ca6:c43b%4]) with mapi id 15.20.0696.013; Tue, 17 Apr 2018 19:50:04 +0000 From: Jeff Haas To: Barry Raveendran Greene CC: Ron Bonica , "Eric Vyncke (evyncke)" , "opsec@ietf.org" , "draft-sriram-opsec-urpf-improvements@ietf.org" Thread-Topic: [OPSEC] Reminder: Call for WG adoption of draft-sriram-opsec-urpf-improvements Thread-Index: AQHT1oU7RYs4tLPULki18qcgJsLIeQ== Date: Tue, 17 Apr 2018 19:50:04 +0000 Message-ID: <209728A1-B747-4B59-AB0F-F21669B67E6C@juniper.net> References: <62EC3E74-6837-4E22-B9C8-FD738316DED6@cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: senki.org; dkim=none (message not signed) header.d=none;senki.org; dmarc=none action=none header.from=juniper.net; x-originating-ip: [66.129.241.11] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; MWHPR05MB3357; 7:He2oMwCfZwy7gxReYr8tNhqxdcTF3My366A/ZQTNQtchL4J3e0//IvFQqyVuYzZPIq3o3NYHBWO4a2ryDVY0kfgxrbaLAtHFRJPd36OToXGzmk5HYqwLhr0rUqUfZCudp70MPC23KFsR1caMs7j2xb/zWAbNedxNKVTi91kxzg/fp1Szz+4ReeEHIa8oF6P1gQMDvIqQjmRRhh0VDHU/SAvyJyNDgn2XTXmtFaL0vSEwW4vPxnPGf1TE7VtbF9aN x-ms-exchange-antispam-srfa-diagnostics: SOS;SOR; x-forefront-antispam-report: SFV:SKI; SCL:-1; SFV:NSPM; SFS:(10019020)(376002)(39860400002)(366004)(12213003)(486006)(82746002)(86362001)(446003)(54906003)(33656002)(316002)(2906002)(6512007)(54896002)(2616005)(11346002)(25786009)(5250100002)(83716003)(26005)(476003)(3660700001)(36756003)(3280700002)(8676002)(76176011)(5660300001)(81166006)(66066001)(4326008)(3846002)(6486002)(186003)(6436002)(99286004)(6116002)(6916009)(8936002)(102836004)(236005)(478600001)(7736002)(6506007)(14454004)(53546011)(229853002); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR05MB3357; H:MWHPR05MB3183.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; MLV:sfv; x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(2017052603328)(7153060)(7193020); SRVR:MWHPR05MB3357; x-ms-traffictypediagnostic: MWHPR05MB3357: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(138986009662008)(100405760836317); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3231232)(944501327)(52105095)(3002001)(6055026)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123558120)(20161123560045)(20161123562045)(6072148)(201708071742011); SRVR:MWHPR05MB3357; BCL:0; PCL:0; RULEID:; SRVR:MWHPR05MB3357; x-forefront-prvs: 0645BEB7AA x-microsoft-antispam-message-info: 0JyLYkatsSUlqBRXM84wuL3Ni+9T8ko6U2GirfqlROPXB6o05/DM1Wi7Y1z7WO4a14BoqQvpkhqEsoR2ozroa60lR5QD0ARZLca+Pg4YmL5guKQ/oS4VIZfwQQ0rtCi5k+7tsnDRRlIvVtedNPQzqLMxIOF01GaqPgnZceW2Aof2+rYzwkPsuUGj6wBvLhbL spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_209728A1B7474B59AB0FF21669B67E6Cjunipernet_" MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: b72e2fb3-256a-489c-d4a9-08d5a49c69e0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: b72e2fb3-256a-489c-d4a9-08d5a49c69e0 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Apr 2018 19:50:04.0128 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR05MB3357 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-04-17_10:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1804170172 Archived-At: Subject: Re: [OPSEC] Reminder: Call for WG adoption of draft-sriram-opsec-urpf-improvements X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Apr 2018 19:50:15 -0000 --_000_209728A1B7474B59AB0FF21669B67E6Cjunipernet_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QmFycnksDQoNCk9uIEFwciAxNywgMjAxOCwgYXQgMzoyMSBQTSwgQmFycnkgUmF2ZWVuZHJhbiBH cmVlbmUgPGJncmVlbmVAc2Vua2kub3JnPG1haWx0bzpiZ3JlZW5lQHNlbmtpLm9yZz4+IHdyb3Rl Og0KT24gQXByIDE4LCAyMDE4LCBhdCAwMTo0OCwgUm9uIEJvbmljYSA8cmJvbmljYUBqdW5pcGVy Lm5ldDxtYWlsdG86cmJvbmljYUBqdW5pcGVyLm5ldD4+IHdyb3RlOg0KDQpBbnkgY29tbWVudHMs IHBvc2l0aXZlLCBuZWdhdGl2ZSBvciBpbmRpZmZlcmVudCB3b3VsZCBiZSBhcHByZWNpYXRlZC4g SXQgaXMgZGlmZmljdWx0IHRvIGp1ZGdlIGNvbnNlbnN1cyBpbiB0aGUgZmFjZSBvZiBzaWxlbmNl Lg0KDQpTaW5jZSB5b3UgYXNrZWQuIEZlYXNpYmxlIHBhdGggd2FzIGJ1aWxkIGFyb3VuZCB0aGUg Y2FwYWJpbGl0aWVzIG9mIEp1bmlwZXLigJlzIEZJQiBzdHJ1Y3R1cmUuIFN0cmljdCBNb2RlLCBM b29zZSBNb2RlLCBhbmQgVlJGIE1vZGUgYWxsIHVzZWQgYSBtb3JlIGdlbmVyYWwgYXBwcm9hY2gu IE15IHF1ZXN0aW9uIGZvciB3b3JraW5nIGdyb3VwIGFkb3B0aW9uIHdvdWxkIGJlIGlmIHRoZSBh cHByb2FjaCBpcyBhcHBsaWNhYmxlIHRvIHZlbmRvcnMgb3V0c2lkZSBvZiBKdW5pcGVyLiBJcyB0 aGlzIHBvc3NpYmxlIG9uIENpc2NvLCBIdWF3ZWksIE5va2lhLCBBcmlzdGEsIGFuZCBvdGhlcnM/ IElmIHllcywgdGhlbiBpdCBpcyBhIGdvb2QgZm9yIHdvcmtpbmcgZ3JvdXAgYWRvcHRpb24uDQoN Ckl0IHNob3VsZCBiZSBub3RlZCB0aGF0IG15IGNvbnRyaWJ1dGlvbiBpc24ndCBpbnRlbmRlZCB0 byBzYXkgIkp1bmlwZXIgY2FuIHN1cHBvcnQgdGhpcyBvdXQgdGhlIGRvb3IiLiAgUmF0aGVyLCB0 aGUgaW50ZW50IGlzIHRvIHN0YXJ0IGRpc2N1c3Npb24gb2YgdGhlIGZyYW1ld29yayB0aGF0IGFk ZHJlc3NlcyB0aGUgcHJvYmxlbSBzcGFjZSBpbiBhIHdheSB0aGF0J3MgbW9yZSBjb21wbGV0ZS4g IFdpdGggdGhhdCBkb25lLCBGSUJzIHRoYXQgZG9uJ3QgaGF2ZSB0aGUgbmVjZXNzYXJ5IHByb3Bl cnRpZXMgdG8gZG8gdGhlIHdvcmsgdGhhdCBldmVudHVhbGx5IGNvbWVzIGZyb20gdGhpcyBvciBy ZWxhdGVkIGRvY3VtZW50cyBjYW4gZXZlbnR1YWxseSBiZSBkZXBsb3llZC4NCg0KTm93IGlzIGJl dHRlciBvYnZpb3VzbHkuICBCdXQgcmlnaHQgbm93LCBiYXNlIEJDUCAzOCAoYXMgeW91IG5vdGUp IGxpdmVzIG9mZiBvZiB1c2VmdWwgaGFja3MuIDotKQ0KDQotLSBKZWZmDQoNCg0K --_000_209728A1B7474B59AB0FF21669B67E6Cjunipernet_ Content-Type: text/html; charset="utf-8" Content-ID: <524E2BCB4F2F374FB57B745751CCCFAF@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KQmFycnksDQo8ZGl2IGNsYXNzPSIi PjxiciBjbGFzcz0iIj4NCjxkaXY+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4N CjxkaXYgY2xhc3M9IiI+T24gQXByIDE3LCAyMDE4LCBhdCAzOjIxIFBNLCBCYXJyeSBSYXZlZW5k cmFuIEdyZWVuZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJncmVlbmVAc2Vua2kub3JnIiBjbGFzcz0i Ij5iZ3JlZW5lQHNlbmtpLm9yZzwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4N CjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0i Ij4NCk9uIEFwciAxOCwgMjAxOCwgYXQgMDE6NDgsIFJvbiBCb25pY2EgJmx0OzxhIGhyZWY9Im1h aWx0bzpyYm9uaWNhQGp1bmlwZXIubmV0IiBzdHlsZT0iY29sb3I6IHJnYigxNDksIDc5LCAxMTQp OyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiIGNsYXNzPSIiPnJib25pY2FAanVuaXBlci5u ZXQ8L2E+Jmd0OyB3cm90ZTo8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxi bG9ja3F1b3RlIHR5cGU9ImNpdGUiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFuczog YXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIiBzdHlsZT0i cGFnZTogV29yZFNlY3Rpb24xOyI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAx cHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBj bGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsgZm9udC1zaXpl OiAxMXB0OyIgY2xhc3M9IiI+QW55IGNvbW1lbnRzLCBwb3NpdGl2ZSwgbmVnYXRpdmUgb3IgaW5k aWZmZXJlbnQgd291bGQgYmUgYXBwcmVjaWF0ZWQuIEl0IGlzIGRpZmZpY3VsdCB0byBqdWRnZSBj b25zZW5zdXMgaW4gdGhlIGZhY2Ugb2Ygc2lsZW5jZS48L3NwYW4+PC9kaXY+DQo8L2Rpdj4NCjwv YmxvY2txdW90ZT4NCjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsiIGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsiIGNsYXNzPSIiPg0KU2luY2UgeW91IGFza2VkLiBGZWFzaWJsZSBwYXRoIHdhcyBidWls ZCBhcm91bmQgdGhlIGNhcGFiaWxpdGllcyBvZiBKdW5pcGVy4oCZcyBGSUIgc3RydWN0dXJlLiBT dHJpY3QgTW9kZSwgTG9vc2UgTW9kZSwgYW5kIFZSRiBNb2RlIGFsbCB1c2VkIGEgbW9yZSBnZW5l cmFsIGFwcHJvYWNoLiBNeSBxdWVzdGlvbiBmb3Igd29ya2luZyBncm91cCBhZG9wdGlvbiB3b3Vs ZCBiZSBpZiB0aGUgYXBwcm9hY2ggaXMgYXBwbGljYWJsZSB0byB2ZW5kb3JzIG91dHNpZGUNCiBv ZiBKdW5pcGVyLiBJcyB0aGlzIHBvc3NpYmxlIG9uIENpc2NvLCBIdWF3ZWksIE5va2lhLCBBcmlz dGEsIGFuZCBvdGhlcnM/IElmIHllcywgdGhlbiBpdCBpcyBhIGdvb2QgZm9yIHdvcmtpbmcgZ3Jv dXAgYWRvcHRpb24uPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KPGRpdj5JdCBzaG91bGQgYmUgbm90ZWQgdGhhdCBteSBjb250cmlidXRpb24gaXNu J3QgaW50ZW5kZWQgdG8gc2F5ICZxdW90O0p1bmlwZXIgY2FuIHN1cHBvcnQgdGhpcyBvdXQgdGhl IGRvb3ImcXVvdDsuICZuYnNwO1JhdGhlciwgdGhlIGludGVudCBpcyB0byBzdGFydCBkaXNjdXNz aW9uIG9mIHRoZSBmcmFtZXdvcmsgdGhhdCBhZGRyZXNzZXMgdGhlIHByb2JsZW0gc3BhY2UgaW4g YSB3YXkgdGhhdCdzIG1vcmUgY29tcGxldGUuICZuYnNwO1dpdGggdGhhdCBkb25lLCBGSUJzIHRo YXQNCiBkb24ndCBoYXZlIHRoZSBuZWNlc3NhcnkgcHJvcGVydGllcyB0byBkbyB0aGUgd29yayB0 aGF0IGV2ZW50dWFsbHkgY29tZXMgZnJvbSB0aGlzIG9yIHJlbGF0ZWQgZG9jdW1lbnRzIGNhbiBl dmVudHVhbGx5IGJlIGRlcGxveWVkLjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4N CjxkaXY+Tm93IGlzIGJldHRlciBvYnZpb3VzbHkuICZuYnNwO0J1dCByaWdodCBub3csIGJhc2Ug QkNQIDM4IChhcyB5b3Ugbm90ZSkgbGl2ZXMgb2ZmIG9mIHVzZWZ1bCBoYWNrcy4gOi0pPC9kaXY+ DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj4tLSBKZWZmPC9kaXY+DQo8ZGl2Pjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0 bWw+DQo= --_000_209728A1B7474B59AB0FF21669B67E6Cjunipernet_-- From nobody Tue Apr 17 13:01:51 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 03F8D126CF6 for ; Tue, 17 Apr 2018 13:01:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.254 X-Spam-Level: X-Spam-Status: No, score=0.254 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FSL_HELO_BARE_IP_2=1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_NUMERIC_HELO=1.164, T_DKIMWL_WL_MED=-0.01] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yahoo.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7y36_wBmI4KK for ; Tue, 17 Apr 2018 13:01:49 -0700 (PDT) Received: from sonic302-28.consmr.mail.gq1.yahoo.com (sonic302-28.consmr.mail.gq1.yahoo.com [98.137.68.154]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ECC7C126C3D for ; Tue, 17 Apr 2018 13:01:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1523995308; bh=UX8VqVMlOCp7PCh9sxHll+bSWhDUuWpI3cTnxlpjtgk=; h=Date:Subject:From:To:From:Subject; b=kZ93qgrTHm1yMTB43E45c++aGGzApZtU6RdlQodflQ1ha0PT/TRTFM5fjcILzXRhJUhIe2cYoBNB6/sDBMWE16QoQxjqHLL4SPmanQ20cvFFssrUmkTMB0Kv6OMpNc1yigWf+Rjze/v8i8CO9/I6n2vzgZ/8o1JsLgczYHyYUORqxgssXxT3AjySyMqgXNobnzAp999auA1xLJdDz6w3vUtg4hdnWPefmrXwR3lqIV1KoXWc0qt99o9Pv73jlJYS7YhL5hH0A35XY8X61yjdHsR1oDW1ieKxpmT9LyzuN5j6KDR5/T3Ql+P/TefI7MUY3R6SdpI9Q9oVmIGK1PNJxA== X-YMail-OSG: VAa64DcVM1kcgsRBF.ItPfAhmP4Q2WRhcSb1eCzoBePJfYvmRp2xBzBwMj_uKRq _qglrcqpf7KMtLlaK6jSWircTF6FpbER5ZaSVegSQ3guxOUFmKZFvHuIvFcJpD0aPda7IdK3.vEx QCSYqU15pYvZTOG6769Altd3sfzxsQPMwXaKfsEw7J1yp1m1tSNMPZeOlL5QCj3U82PcVjSGoVw8 AnvT51V1m5bBRgKeo6EL9zq9tWGws4yYprxCVjJ3cABCR5iXsMjfL0m4FvOk8gTTvqO8EgAzWl_s fRYJlfm_.oiYLjkEEEzzFmKp3ggLe31STANjbd8.ia8nq9QMBTG28dVV4Do9bq7n3kT9K.JLhGmU 3uf43swnKhQpc4s.ZSsAFQiKErFeqQI2k8GwxB0ruRJ3bB3ZlI9na8vUijh9cnrstzifs.cPCXS. SY17pvCdF1LHVLl64nrVXW4aigRrI15Dx0CWbl8P65lORCWstG0tOoQzx8KCESeY18nnpkjcryoe webUGAkx6l4tDzVMqvuy3aR0R1S7RBwTQHjzmUJbKVP6qSXE- Received: from sonic.gate.mail.ne1.yahoo.com by sonic302.consmr.mail.gq1.yahoo.com with HTTP; Tue, 17 Apr 2018 20:01:48 +0000 Received: from 67.159.150.85 (EHLO [192.168.1.5]) ([67.159.150.85]) by smtp426.mail.gq1.yahoo.com (Oath Hermes SMTP Server) with ESMTPA ID 9eaf7deae399fffe4f0139339efb1d37; Tue, 17 Apr 2018 20:01:46 +0000 (UTC) User-Agent: Microsoft-MacOutlook/10.c.0.180410 Date: Tue, 17 Apr 2018 13:01:45 -0700 From: Mehmet Adalier To: Message-ID: <09ACEBC6-797D-41ED-9146-C784D235C59B@antarateknik.com> Thread-Topic: [OPSEC] Call for WG adoption of draft-sriram-opsec-urpf-improvements Mime-version: 1.0 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Archived-At: Subject: Re: [OPSEC] Call for WG adoption of draft-sriram-opsec-urpf-improvements X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Apr 2018 20:01:50 -0000 I have reviewed the draft and the IETF 101 presentation.=20 I support the adoption of "draft-sriram-opsec-urpf-improvements" as an OPSE= C Working Group document Mehmet Adalier Antara Teknik LLC As discussed during the WG meeting in London IETF-101, let's have a call fo= r adopting draft-sriram-opsec-urpf-improvements as an OPSEC Working Group do= cument. The call will last 2 weeks until 18th of April included (UTC midnight). So, please reply to the list whether you support the adoption or not. Obvio= usly, if adopted, then the document will probably be reviewed more extensive= ly and modified. Thank you for your participation -=C3=A9ric & -ron From nobody Tue Apr 17 13:21:59 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB5B612D9FF for ; Tue, 17 Apr 2018 13:21:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B4NXJ1n-dWah for ; Tue, 17 Apr 2018 13:21:54 -0700 (PDT) Received: from smtp121.ord1d.emailsrvr.com (smtp121.ord1d.emailsrvr.com [184.106.54.121]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A7D72126CD6 for ; Tue, 17 Apr 2018 13:21:54 -0700 (PDT) Received: from smtp16.relay.ord1d.emailsrvr.com (localhost [127.0.0.1]) by smtp16.relay.ord1d.emailsrvr.com (SMTP Server) with ESMTP id E9F4240081; Tue, 17 Apr 2018 16:21:53 -0400 (EDT) X-Auth-ID: bgreene@senki.org Received: by smtp16.relay.ord1d.emailsrvr.com (Authenticated sender: bgreene-AT-senki.org) with ESMTPSA id 8DF2C4006D; Tue, 17 Apr 2018 16:21:52 -0400 (EDT) X-Sender-Id: bgreene@senki.org Received: from [10.101.0.129] (58-84-236-175.nzwireless.co.nz [58.84.236.175]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384) by 0.0.0.0:465 (trex/5.7.12); Tue, 17 Apr 2018 16:21:53 -0400 From: Barry Greene Message-Id: Content-Type: multipart/signed; boundary="Apple-Mail=_9D92C3CD-BFBF-4B5D-9B27-7ADE3B0973BC"; protocol="application/pgp-signature"; micalg=pgp-sha512 Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Date: Wed, 18 Apr 2018 08:21:48 +1200 In-Reply-To: <209728A1-B747-4B59-AB0F-F21669B67E6C@juniper.net> Cc: Ron Bonica , "Eric Vyncke (evyncke)" , "opsec@ietf.org" , "draft-sriram-opsec-urpf-improvements@ietf.org" To: Jeff Haas References: <62EC3E74-6837-4E22-B9C8-FD738316DED6@cisco.com> <209728A1-B747-4B59-AB0F-F21669B67E6C@juniper.net> X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [OPSEC] Reminder: Call for WG adoption of draft-sriram-opsec-urpf-improvements X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Apr 2018 20:21:58 -0000 --Apple-Mail=_9D92C3CD-BFBF-4B5D-9B27-7ADE3B0973BC Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Apr 18, 2018, at 7:50 AM, Jeff Haas wrote: >=20 > It should be noted that my contribution isn't intended to say "Juniper = can support this out the door". Rather, the intent is to start = discussion of the framework that addresses the problem space in a way = that's more complete. With that done, FIBs that don't have the = necessary properties to do the work that eventually comes from this or = related documents can eventually be deployed. >=20 > Now is better obviously. But right now, base BCP 38 (as you note) = lives off of useful hacks. :-) I=E2=80=99ll read through and provide feedback to the document. There = are sections where are erroneous. For example, Loose mode was never ever = designed for SAV. People keep putting a share peg in a round hole. Loose = mode is a DOS response tool. Another example is the absence of VRF mode. That mode does work with SAV = on the downstream (towards the customer) and upstream (on the peering = edge). Then you have this statement "It is well known that this method has = limitations when networks are multi-homed and there is asymmetric = routing of packets.=E2=80=9D That is false. BCP84 is wrong. uRPF has = been deployed with multi-homed downstream customers. It work _if_ you = configure it correctly (i.e. use BGP Weights). But still, the core of this has to get into code capable modes on ASICs, = FPGA, & NPs. Feasible path is not something that can be done easily on = other vendor implementations (been there - tried that). A working group adoption where the WG takes on the task of pulling = multiple vendor microcoders to ensure what is done is _codeable_ and = _deployable_ would be a reason for working group adoption. Barry --Apple-Mail=_9D92C3CD-BFBF-4B5D-9B27-7ADE3B0973BC Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEdoGA/YBcwd1ud+j1VW6TcBa/RfMFAlrWV1wACgkQVW6TcBa/ RfOiyQf/crgZPBBqR6sBApYkkgdUt7/N49eDv/SDge1+reRQiEgw224xYAcOtoDP WulZ882b6OGbnASujGTzJOAsIBteEeklOF3Mr1IC2j8U1SXDVdimaZInR+y/UYGX Y9E8/XT22h7tIuRt85mEfZeaFk2hGwZeps70GilSTZiDo5mPQkJMRbuOOOXsx03H UHYKySdw7wgeRyP2zoRPGmgA+Uy7U/iRrN6PktYV4muy4RkRWXn4eTcMFqXG3l1V +fawpaOm7HrV4sjqFsGIh0DbGtr+VdGyeadbXkjlC58UTyrKoY/I10vAcYjMN2Mx Iqa4MZpwjYD1ta+YWa+VXDdvbnThJw== =qij+ -----END PGP SIGNATURE----- --Apple-Mail=_9D92C3CD-BFBF-4B5D-9B27-7ADE3B0973BC-- From nobody Tue Apr 17 20:11:26 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A907A129C51 for ; Tue, 17 Apr 2018 20:11:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kJ0wnd8QB7Kg for ; Tue, 17 Apr 2018 20:11:23 -0700 (PDT) Received: from mail-io0-x22f.google.com (mail-io0-x22f.google.com [IPv6:2607:f8b0:4001:c06::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E2DDA129C6B for ; Tue, 17 Apr 2018 20:11:22 -0700 (PDT) Received: by mail-io0-x22f.google.com with SMTP id a7-v6so682890ioc.12 for ; Tue, 17 Apr 2018 20:11:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:sender:from:date:message-id:subject:to; bh=+M7Gnc1O+AuoOQiCLFQS6rVSc1AYiQp0ueA9CT/g0KU=; b=MIt8KxiqTo/9WyzyYNQcByMwvFcYLmRc1KaPpKXcyYx16fa2dGhqrBdBjEXpdUAizP rAELoXcU8zJVTUCHgtAxedYgK7Wzm3myZPY0BEuj6iAJGd0sSxYWdFwXFZ6z6lQotAqh RTdNHqeiVg6lveSAoRa/leZDxr7FrL4rqS5Efs1xspnAz8U3t4Wh7ouB7yojrfMdC8hV 3yk8lu+l811wS81qgxgS0sYh3OeuhnIuTYgqsFh/gsRYP6IhoQugIEG3ZeXtEFvq6kT0 OxwJEV/sDNdvd+ugDyZFfcUTmw4YI2lzdMzWbzFVhT5kXwcVqRl38t8Y4SwoiUUSF4H3 aHpQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:from:date:message-id:subject :to; bh=+M7Gnc1O+AuoOQiCLFQS6rVSc1AYiQp0ueA9CT/g0KU=; b=QegTa+3mqV86lVQs4EMarYslhmUoF0s8Rv//eexbuzINkmz+7KnPmO/ge2v0S3KocB zX/TkblehCm9/7DHjx0AVQnXRIUtCViYni2mU0qgm+5r/0wyMXFj6CxeAUtn/w5+yIzN XavdCW0E0VkLfchsGacC3oXFWQJHu4Spl7B54zpA4W+UXsvgLq1sWsiQpTa2O+tqqUAd jFzxtQ+YDxwHbQz6TZchQDCQrTl51Bf+38RF2HkBZodeuywm4MOQYPmyzjihoYCec9fo eOpIdL0cAb7qJZkFLHKOoE3ZyYRbHMhF0k+OZP/iaAsP69QSVqkfersj1mNwemjtxPHh yW7g== X-Gm-Message-State: ALQs6tA9WDS4bzMtaovklA9qmB1IV075m4MMrzLqQ9flgDtouTmPUe5b MM+gR67A3cPHZKQevFgDzkVuAQEilM2QM0l8hsbK6KPn X-Google-Smtp-Source: AB8JxZrg2U2M6yoveZmSV3Rj9LVej2dQsYibizHTJfmg4ZxaeR8d17CAztDp5PhXYufsxk9w0mqWLcuM6AGiDJ4GVv0= X-Received: by 2002:a6b:1dd5:: with SMTP id d204-v6mr274734iod.205.1524021081739; Tue, 17 Apr 2018 20:11:21 -0700 (PDT) MIME-Version: 1.0 Sender: amir.herzberg@gmail.com Received: by 2002:a4f:bb0c:0:0:0:0:0 with HTTP; Tue, 17 Apr 2018 20:11:01 -0700 (PDT) From: Amir Herzberg Date: Tue, 17 Apr 2018 23:11:01 -0400 X-Google-Sender-Auth: TwqgnbKzh5OJzBr8BqjU35Y7smU Message-ID: To: opsec@ietf.org Content-Type: multipart/alternative; boundary="0000000000003514bf056a16cf2e" Archived-At: Subject: Re: [OPSEC] Reminder: Call for WG adoption of draft-sriram-opsec-urpf-improvements X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Apr 2018 03:11:25 -0000 --0000000000003514bf056a16cf2e Content-Type: text/plain; charset="UTF-8" I support the adoption of "draft-sriram-opsec-urpf-improvements" as an OPSEC Working Group document. This is based on my review of the draft and the IETF 101 presentation. Let me mention that I think the WG should also consider potential use of RPKI as a complementary mechanism to improve uRPF. Namely, if there is an ROA for the prefix-origin pair, it should be allowed (even if the (enhanced/preferred)uRPF check fails. In a future (fantasy?) where RPKI is widely deployed, this solution may have even been better. I'm aware that this is, unfortuately, far cry from current situation, hence I definitely support moving forward with this draft. My comment can be discussed as part of this or separately (or not at all). thanks, Amir -- Amir Herzberg Comcast professor for security innovation Dept. of Computer Science and Engineering, University of Connecticut Publications: https://www.researchgate.net/profile/Amir_Herzberg/contributions Lecture notes in intro to cyber-security: https://www.researchgate.net/project/Lecture-notes-on-Introduction-to-Cyber-Security --0000000000003514bf056a16cf2e Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable 
I support the adoption of "draft-sriram-opsec-urpf-improvements=
" as an OPSEC Working Group document.
This is based on my =
review of the draft and the IETF 101 presentation.
Let me=C2=A0mention that I think the WG should also consider potential use = of RPKI as a complementary mechanism to improve uRPF. Namely, if there is a= n ROA for the prefix-origin pair, it should be allowed (even if the (enhanc= ed/preferred)uRPF check fails. In a future (fantasy?) where RPKI is widely = deployed, this solution may have even been better. I'm aware that this = is, unfortuately, far cry from current situation, hence I definitely suppor= t moving forward with this draft. My comment can be discussed as part of th= is or separately (or not at all).=C2=A0

thanks, Amir
--
= Amir Herzberg
Comcast professor for security innovation
Dept.= of Computer Science and Engineering, University of Connecticut


--0000000000003514bf056a16cf2e-- From nobody Wed Apr 18 01:30:19 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 136F312D810 for ; Wed, 18 Apr 2018 01:30:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IX9grgn3H67R for ; Wed, 18 Apr 2018 01:30:14 -0700 (PDT) Received: from mobil.space.net (mobil.space.net [IPv6:2001:608:2:81::67]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ECC19124C27 for ; Wed, 18 Apr 2018 01:30:13 -0700 (PDT) X-Original-To: opsec@ietf.org Received: from mobil.space.net (localhost [IPv6:::1]) by mobil.space.net (Postfix) with ESMTP id ECC3B42C3D for ; Wed, 18 Apr 2018 10:30:10 +0200 (CEST) X-SpaceNet-Relay: true X-SpaceNet-Relay: true X-SpaceNet-Relay: true X-SpaceNet-Relay: true Received: from moebius4.space.net (moebius4.space.net [IPv6:2001:608:2:2::251]) by mobil.space.net (Postfix) with ESMTP id DD3B542C3A; Wed, 18 Apr 2018 10:30:10 +0200 (CEST) Received: by moebius4.space.net (Postfix, from userid 1007) id D96BA33BFC; Wed, 18 Apr 2018 10:30:10 +0200 (CEST) Date: Wed, 18 Apr 2018 10:30:10 +0200 From: Gert Doering To: Barry Greene Cc: Jeff Haas , "opsec@ietf.org" , "draft-sriram-opsec-urpf-improvements@ietf.org" Message-ID: <20180418083010.GE89741@Space.Net> References: <62EC3E74-6837-4E22-B9C8-FD738316DED6@cisco.com> <209728A1-B747-4B59-AB0F-F21669B67E6C@juniper.net> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="u7h1iXErI7Z7T8NR" Content-Disposition: inline In-Reply-To: X-NCC-RegID: de.space User-Agent: Mutt/1.9.3 (2018-01-21) Archived-At: Subject: Re: [OPSEC] Reminder: Call for WG adoption of draft-sriram-opsec-urpf-improvements X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Apr 2018 08:30:17 -0000 --u7h1iXErI7Z7T8NR Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi, On Wed, Apr 18, 2018 at 08:21:48AM +1200, Barry Greene wrote: > Then you have this statement "It is well known that this method has limit= ations when networks are multi-homed and there is asymmetric routing of pac= kets.??? That is false. BCP84 is wrong. uRPF has been deployed with multi-h= omed downstream customers. It work _if_ you configure it correctly (i.e. us= e BGP Weights). =2E.. and *if* your customer announces all their prefixes symmetrically to= =20 all upstreams... So generally speaking, for multihoming BGP customers, there are too many failure modes to rely on uRPF - but it's fairly easily remediated if your tool that deploys BGP prefix-filters also builds matching interface ACLs with it. So "whatever prefix the customer *might* announce, we'll accept the packet". Of course this assumes that BGP downstreams are actually filtered, but=20 this particular source of depression is not really in scope :-) Gert Doering -- NetMaster --=20 have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard, Michael Em= mer Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279 --u7h1iXErI7Z7T8NR Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEruB5jRHVM+CjiYD131bAZeTOf8UFAlrXAg8ACgkQ31bAZeTO f8WODg//VvEcerV8xKQMhpL3N1daXgbuWTVKn6+W/iUOdz5pc5Tfod9TP4/fNL8o YCBS8ndI4MJTFy/H1U5bIGsSjp1ROobUf8M2Xk48zpgnQIXnyluqj/FNYBbEI/88 SNWYYIi8LtmvLT2mjGGK/vgI9bRMXhB8gz/YrMqGFGJigV87zdizSjIf97qBagAy PNIRcA6brCgQxpJD2RO8JkhJXxHpPr6xJkUEu6vedNGedSOZPtwWYgrdn/UJOoh8 0T8dieD0rZlrfmhz2N1+GjO2bq9/ZWeIJtMW1s/BAD5tJMrfzZB9MPyODV2uOwkY 8TTe48uz2vc3srf/smQjt8N+JKQdqQUQ6U0+Tkh1R5f5Jn1K+l5M185DvCpKnLt+ TF+wy3aymt4t0mydh12lN+fLrxr0ATOyhv+75AOE++ZLVKnpeyEm2tj1vw/jJiNc JNvhGAivmPH7+hbjwawnXfrl/dc632rYHGM5UCDSts/BGm3sx5p3LX2bQ43poT/w IAsuZQamNQU7txOf9V2i5OWze9gZvDyyj5TyXynVecmT3+e1f5Py7ddtBee/pm9/ Qg/JEinwEJ+i6nE1Xu8yA11zJULQOaxIK2ALaaajiDv9/ikmOMwnzxUOOYs7FIfO GaTwaOlo6zC30/3QAyCiElslyaGucmIWzpjUBZKAwNYz1FSq+Qs= =Z5mb -----END PGP SIGNATURE----- --u7h1iXErI7Z7T8NR-- From nobody Wed Apr 18 05:20:34 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E220129C53; Wed, 18 Apr 2018 05:20:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7JXjsC8FhB6y; Wed, 18 Apr 2018 05:20:31 -0700 (PDT) Received: from GCC01-CY1-obe.outbound.protection.outlook.com (mail-cy1gcc01on072f.outbound.protection.outlook.com [IPv6:2a01:111:f400:fd00::72f]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7D135127978; Wed, 18 Apr 2018 05:20:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=u5KXbdn4f6mAJAHaa2SeRP67EyLqHhm//OMc2Ct6TGM=; b=huNB9lRSf5AumNBiicxowdFttDTs9pkC6BhZ383nyheZyZ0D3XtXb3YCPiTgPwwQeJ/gy2dOYL2Sto/aTo9yJwleaTWstnpRYKw+YhSNca7QDqMP+jQSf/LMHH52X59YB6MGcbYs2fJZsKijxmZ9WLb1PQ+rIju6pzaL/gy9vKE= Received: from BYAPR09MB2773.namprd09.prod.outlook.com (52.135.224.26) by MW2PR0901MB2507.namprd09.prod.outlook.com (52.132.145.155) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.696.13; Wed, 18 Apr 2018 12:20:29 +0000 Received: from BYAPR09MB2773.namprd09.prod.outlook.com ([fe80::4cf3:af64:d3c9:6d33]) by BYAPR09MB2773.namprd09.prod.outlook.com ([fe80::4cf3:af64:d3c9:6d33%13]) with mapi id 15.20.0675.015; Wed, 18 Apr 2018 12:20:29 +0000 From: "Sriram, Kotikalapudi (Fed)" To: Amir Herzberg CC: Jeff Haas , "opsec@ietf.org" , "Montgomery, Douglas (Fed)" , "opsec-chairs@ietf.org" Thread-Topic: [OPSEC] Reminder: Call for WG adoption of draft-sriram-opsec-urpf-improvements Thread-Index: AQHT1lLIbGeU5Xqc/UquFQvfMyg346QFVeQAgAAIBQCAAAjdAIAAy4EAgAA5nFY= Date: Wed, 18 Apr 2018 12:20:28 +0000 Message-ID: References: <62EC3E74-6837-4E22-B9C8-FD738316DED6@cisco.com> <209728A1-B747-4B59-AB0F-F21669B67E6C@juniper.net> , <20180418083010.GE89741@Space.Net> In-Reply-To: <20180418083010.GE89741@Space.Net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: juniper.net; dkim=none (message not signed) header.d=none;juniper.net; dmarc=none action=none header.from=nist.gov; x-originating-ip: [129.6.218.35] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; MW2PR0901MB2507; 7:JY+0hFBIVN/sLp8bsZonItYpVlj1C1PbfM76QfyK+w835aaAI7ZAhdH/ANEUVkRcKXQ3L+jA/6SJyH7k5I8Ay2CTsKk+wwgQ+pAKJH8QhNc9xewv+xu+JswOTCbuHGURdb/3+F/aQBLP7IZqfTzo58XqNrTmnxPyo+Mt8tTY05SdL6JKHrUUymSDl8IVFRypbwOv2uM+9kEiIEbFO9y2mRY+vJr6B0DoD/A5egxANufevaj4qXbD8IF0bbd2hdGR x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:MW2PR0901MB2507; x-ms-traffictypediagnostic: MW2PR0901MB2507: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040522)(2401047)(8121501046)(5005006)(93006095)(93001095)(3231232)(944501368)(52105095)(10201501046)(3002001)(6055026)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123560045)(20161123562045)(20161123558120)(6072148)(201708071742011); SRVR:MW2PR0901MB2507; BCL:0; PCL:0; RULEID:; SRVR:MW2PR0901MB2507; x-forefront-prvs: 06469BCC91 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(39380400002)(376002)(366004)(39860400002)(396003)(12213003)(5250100002)(25786009)(3280700002)(33656002)(446003)(8676002)(14454004)(186003)(76176011)(316002)(6246003)(3660700001)(66066001)(53936002)(99286004)(2906002)(3846002)(476003)(86362001)(81166006)(11346002)(6116002)(97736004)(7736002)(4326008)(6506007)(26005)(229853002)(8936002)(6916009)(6436002)(102836004)(54906003)(93886005)(39060400002)(5660300001)(7696005)(8666007)(74316002)(305945005)(2900100001)(9686003)(55016002)(478600001); DIR:OUT; SFP:1102; SCL:1; SRVR:MW2PR0901MB2507; H:BYAPR09MB2773.namprd09.prod.outlook.com; FPR:; SPF:None; LANG:en; MLV:ovrnspm; PTR:InfoNoRecords; x-microsoft-antispam-message-info: +QwNVJltasjjNz/fVABoFa2jq0ABxFXh9bycG8RAarl2upzZ0nVQWdUHw+lPokN0PfJn/PhzteChw+ZvAk8AjBY+bXPDpnwQH5YQuq7+GKkxBLRL8Co621L0ku7B8ERx9pefI6uqhNSJQ2cl/MyCL30ic8MbHTQMCNCArk3wFMrOpin4BJDs9vQTjwDq3vtX spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: 9b590c03-8e33-455a-3f62-08d5a526c5e9 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-Network-Message-Id: 9b590c03-8e33-455a-3f62-08d5a526c5e9 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Apr 2018 12:20:28.9593 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW2PR0901MB2507 Archived-At: Subject: Re: [OPSEC] Reminder: Call for WG adoption of draft-sriram-opsec-urpf-improvements X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Apr 2018 12:20:33 -0000 Amir, >I support the adoption of "draft-sriram-opsec-urpf-improvements" as an >OPSEC Working Group document. Thank you. > >Let me mention that I think the WG should also consider potential use of >RPKI as a complementary mechanism to improve uRPF. Namely, if there is an >ROA for the prefix-origin pair, it should be allowed (even if the >(enhanced/preferred)uRPF check fails. In a future (fantasy?) where RPKI is I agree with you here. When you say, "if there is an ROA for the prefix-origin pair, it should be allowed", I think you mean ROA for prefix-origin pair with origin AS in the ISP's customer cone. What you propose can be done even in partial deployment of RPKI,=20 of course not stand alone but for augmenting the RPF lists=20 constructed with the methods proposed in the draft. It helps to add completeness and/or perform additional sanity checks for th= e RPF filters. Of course, the benefit of doing this (as a complementary mechanism) gets increasing better as the RPKI deployment grows. Sriram=20 >widely deployed, this solution may have even been better. I'm aware that >this is, unfortuately, far cry from current situation, hence I definitely >support moving forward with this draft. My comment can be discussed as par= t >of this or separately (or not at all). > >thanks, Amir > > From nobody Wed Apr 18 05:24:14 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4D159127023; Wed, 18 Apr 2018 05:24:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j63XB3TuHKaZ; Wed, 18 Apr 2018 05:24:11 -0700 (PDT) Received: from mail-io0-x230.google.com (mail-io0-x230.google.com [IPv6:2607:f8b0:4001:c06::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D6C501277BB; Wed, 18 Apr 2018 05:24:10 -0700 (PDT) Received: by mail-io0-x230.google.com with SMTP id l2-v6so685063iog.9; Wed, 18 Apr 2018 05:24:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=bBbbe7EiLuAt8IH3efVMXU8MUkZ1rlTEqwSdV3H/Q+U=; b=HDeU8kQENDNMcILLYS8xJ9MJCN21nLsQO8uTP3FSs9Rln1RIta60ORXEgXYJuFwyxg 3w6i0FHsFfdeVutNh5lVZCCv3y3b/uSbTIBYUyAu7Gd/3jC1DlLjJOe2KjhJEackJl7U d6ZL6jCCuzcaJzYINo4/AF2oQ7uhcSVfcN1tBujB6xR2uzXMQfKgdtNaILGFGPdGdooD f79HcS/895B7CfN/HMACTdCJnXFScN1biC4X2wmypw9IZwnfIFOP/85xXvaIqwvEtgA+ 9LgpM4vtX40JMK6li64mRbIrZuZgpItDYbyZpwMnzzwsO4ArXMOypxJ9yUtNLQSpHZAg TwTw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=bBbbe7EiLuAt8IH3efVMXU8MUkZ1rlTEqwSdV3H/Q+U=; b=ClaMVPlDjTZbxV+meuwwPNb1t6Ech4BVSWKpUiGhWXgh9Mf0RrMeIE7lbsAdNwbrMb QNrNhh3YR9e1Nu6W1dkOuslg1NMMlc+DZqJE5wsMFky+aJNfE7O++o+SuO9eesXPlnyL 16jH7VEe+kAVFr2URQt2q8KiJsz3fgyQPtSxhWsyAbOtEVhLUziwroQAAE2jxSeBSU5U mAnT7XRM+JS11giRkxVYHgO/Ii2L7w7RDVc6gtV3kcQdb+bb6umUzzdvQGbjr4oTsLmV 5VX5s3VNcaM6yTd3FHYGAoMGfTVe2dXJ5Ma2bTv4miJq4q/eWbyZ7GMdEoWX0bivrA+e 8kig== X-Gm-Message-State: ALQs6tAmzRwPg8weB6tjM/hHBXUPTs/h6Zay6KOKc/WS3NqB2fhe0H1i FdTVfeurw7wgJW/7C0ZcxTGMx2QODEjJmL27bDE= X-Google-Smtp-Source: AB8JxZoL5zABc5aIB4VVBkdOfWASHjb6DtKIEOjTiHMAU5NuYfpVjVEcb0dgdTjlAqdYcvTgYJStR4mfYfXAj5gavG0= X-Received: by 2002:a6b:81d3:: with SMTP id l80-v6mr1695572ioi.118.1524054249987; Wed, 18 Apr 2018 05:24:09 -0700 (PDT) MIME-Version: 1.0 References: <62EC3E74-6837-4E22-B9C8-FD738316DED6@cisco.com> <209728A1-B747-4B59-AB0F-F21669B67E6C@juniper.net> <20180418083010.GE89741@Space.Net> In-Reply-To: From: Amir Herzberg Date: Wed, 18 Apr 2018 12:23:58 +0000 Message-ID: To: "Sriram, Kotikalapudi (Fed)" Cc: Jeff Haas , "Montgomery, Douglas (Fed)" , "opsec-chairs@ietf.org" , "opsec@ietf.org" Content-Type: multipart/alternative; boundary="0000000000003066f3056a1e8848" Archived-At: Subject: Re: [OPSEC] Reminder: Call for WG adoption of draft-sriram-opsec-urpf-improvements X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Apr 2018 12:24:13 -0000 --0000000000003066f3056a1e8848 Content-Type: text/plain; charset="UTF-8" Yes, I agree. On Wed, Apr 18, 2018 at 8:20 AM Sriram, Kotikalapudi (Fed) < kotikalapudi.sriram@nist.gov> wrote: > Amir, > > >I support the adoption of "draft-sriram-opsec-urpf-improvements" as an > >OPSEC Working Group document. > > Thank you. > > > > >Let me mention that I think the WG should also consider potential use of > >RPKI as a complementary mechanism to improve uRPF. Namely, if there is an > >ROA for the prefix-origin pair, it should be allowed (even if the > >(enhanced/preferred)uRPF check fails. In a future (fantasy?) where RPKI is > > I agree with you here. When you say, "if there is an > ROA for the prefix-origin pair, it should be allowed", I think you mean > ROA for prefix-origin pair with origin AS in the ISP's customer cone. > What you propose can be done even in partial deployment of RPKI, > of course not stand alone but for augmenting the RPF lists > constructed with the methods proposed in the draft. > It helps to add completeness and/or perform additional sanity checks for > the RPF filters. > Of course, the benefit of doing this (as a complementary mechanism) > gets increasing better as the RPKI deployment grows. > > Sriram > > >widely deployed, this solution may have even been better. I'm aware that > >this is, unfortuately, far cry from current situation, hence I definitely > >support moving forward with this draft. My comment can be discussed as > part > >of this or separately (or not at all). > > > >thanks, Amir > > > > > -- -- Amir Herzberg Associate Professor, Dept. of Computer Science, Bar Ilan University http://www.cs.biu.ac.il/~herzbea --0000000000003066f3056a1e8848 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Yes, I agree.

On Wed, Ap= r 18, 2018 at 8:20 AM Sriram, Kotikalapudi (Fed) <kotikalapudi.sriram@nist.gov> wrote:
Amir,

>I support the adoption of "draft-sriram-opsec-urpf-improvements&qu= ot; as an
>OPSEC Working Group document.

Thank you.

>
>Let me mention that I think the WG should also consider potential use o= f
>RPKI as a complementary mechanism to improve uRPF. Namely, if there is = an
>ROA for the prefix-origin pair, it should be allowed (even if the
>(enhanced/preferred)uRPF check fails. In a future (fantasy?) where RPKI= is

I agree with you here. When you say, "if there is an
ROA for the prefix-origin pair, it should be allowed", I think you mea= n
ROA for prefix-origin pair with origin AS in the ISP's customer cone. What you propose can be done even in partial deployment of RPKI,
of course not stand alone but for augmenting the RPF lists
constructed with the methods proposed in the draft.
It helps to add completeness and/or perform additional sanity checks for th= e RPF filters.
Of course, the benefit of doing this (as a complementary mechanism)
gets increasing better as the RPKI deployment grows.

Sriram

>widely deployed, this solution may have even been better. I'm aware= that
>this is, unfortuately, far cry from current situation, hence I definite= ly
>support moving forward with this draft. My comment can be discussed as = part
>of this or separately (or not at all).
>
>thanks, Amir
>
>
--
--
Amir Herzberg
Associate Profes= sor, Dept. of Computer Science, Bar Ilan University

http://www.cs.biu.ac.il/~her= zbea

--0000000000003066f3056a1e8848-- From nobody Wed Apr 18 05:53:51 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5A4012D779; Wed, 18 Apr 2018 05:53:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OOBwWLzTQ-V3; Wed, 18 Apr 2018 05:53:41 -0700 (PDT) Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 442A51200F1; Wed, 18 Apr 2018 05:53:41 -0700 (PDT) Received: from pps.filterd (m0108162.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w3ICeV6m008868; Wed, 18 Apr 2018 05:53:39 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=PPS1017; bh=QOYdRN8jF6XIqaR0MnDN8Conin4BRDif2yF00FNGr44=; b=1Vl9LmRrllOkJKkn74CZEAuFmDXbU34P2hjZstO4ckn/XwgXsA1WGG92y0Ktu/gWAALb xlWFrLQlORJFZMTNIYpCsPUCXmXY9bIK6kw7S24CRNjugim2AnUF+157nhZ6EvbNeZdC T9LEcYSauW8Jw7m7yo+sMPKcbGQtrC/tmbMwwYokmnWPyF9bGoourh/++/kA/gh9ChE5 7nVC79YfkXD2/uwXxP1L05mHC2xjhGX1dbRL0m18BQ7Cc799lxyV5aD7B4TZiv0q/kSZ T1E17hJq4mPwVGJdtFcslM3JOqtKTJVG5l5gMARs/+X5n/7lBHAzsMXMRwnFrV3fq6T5 Gg== Received: from nam02-bl2-obe.outbound.protection.outlook.com (mail-bl2nam02lp0081.outbound.protection.outlook.com [207.46.163.81]) by mx0b-00273201.pphosted.com with ESMTP id 2he5q7g2nr-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Wed, 18 Apr 2018 05:53:39 -0700 Received: from MWHPR05MB3183.namprd05.prod.outlook.com (10.173.229.138) by MWHPR05MB2813.namprd05.prod.outlook.com (10.168.245.7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.696.10; Wed, 18 Apr 2018 12:53:37 +0000 Received: from MWHPR05MB3183.namprd05.prod.outlook.com ([fe80::99de:815c:1ca6:c43b]) by MWHPR05MB3183.namprd05.prod.outlook.com ([fe80::99de:815c:1ca6:c43b%4]) with mapi id 15.20.0696.013; Wed, 18 Apr 2018 12:53:37 +0000 From: Jeff Haas To: "Sriram, Kotikalapudi (Fed)" CC: Amir Herzberg , "opsec@ietf.org" , "Montgomery, Douglas (Fed)" , "opsec-chairs@ietf.org" Thread-Topic: [OPSEC] Reminder: Call for WG adoption of draft-sriram-opsec-urpf-improvements Thread-Index: AQHT1oU7RYs4tLPULki18qcgJsLIeQ== Date: Wed, 18 Apr 2018 12:53:37 +0000 Message-ID: <972BDFF8-FBA9-4825-ADDC-FBF4100BDD77@juniper.net> References: <62EC3E74-6837-4E22-B9C8-FD738316DED6@cisco.com> <209728A1-B747-4B59-AB0F-F21669B67E6C@juniper.net> <20180418083010.GE89741@Space.Net> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [66.129.241.11] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; MWHPR05MB2813; 7:DxAPxDEewtprfVMpNQxcolBYyiqek++ABJ3DKpIhVhtJ8K6ik7Bk8aQPh5mgB079g4dLAg/gf2TFLDzhAHFq/61m68snRZuXA3ABnxG8gwGDQRrAPz4sbQQ22XszSf3chTi7UdkgkXgUDiZRru+Aej06b+BhRrPCYhS3SSU9RZFaOAO4CImuInXOQ3gtqb+lWvW/CGMyQIv+AdY0k52PHbO5gjVFIbjZm+L60mOKDKvdJtWe8CXtbKsrY4Fk1R99 x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:MWHPR05MB2813; x-ms-traffictypediagnostic: MWHPR05MB2813: authentication-results: outbound.protection.outlook.com; spf=skipped (originating message); dkim=none (message not signed) header.d=none; dmarc=none action=none header.from=juniper.net; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(65766998875637); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(10201501046)(3002001)(3231232)(944501368)(52105095)(93006095)(93001095)(6055026)(6041310)(20161123562045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123564045)(6072148)(201708071742011); SRVR:MWHPR05MB2813; BCL:0; PCL:0; RULEID:; SRVR:MWHPR05MB2813; x-forefront-prvs: 06469BCC91 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(39380400002)(39860400002)(376002)(366004)(346002)(12213003)(6506007)(53546011)(36756003)(26005)(7736002)(14454004)(102836004)(99286004)(76176011)(6486002)(186003)(8656006)(478600001)(82746002)(86362001)(83716003)(59450400001)(2906002)(6512007)(3280700002)(3660700001)(53936002)(93886005)(25786009)(8676002)(39060400002)(316002)(5250100002)(81166006)(229853002)(54906003)(4326008)(305945005)(97736004)(8936002)(5660300001)(2616005)(476003)(3846002)(2900100001)(6436002)(6116002)(6246003)(11346002)(6916009)(446003)(561944003)(33656002)(66066001); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR05MB2813; H:MWHPR05MB3183.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; MLV:ovrnspm; PTR:InfoNoRecords; x-microsoft-antispam-message-info: TuuvzKu5vT43tuew9QZmsNn3XBsZrV2sLcBAvSeLkUC628QLIcEtu4L2e4TGI4T1nSOdrTmHi/AhGkVkwqpU/+b89/iHXSelKGnL2MTiyKdXl4gSiZCk81gKzr2ULojO+Gc0mItqi91Ztt/oshWU2x4E5liEBTgv6u1E0Z1NiuSBFntTcKyLWH4qcR8cxoCI spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-ID: <327308C956711C47941E92D29A609C10@namprd05.prod.outlook.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: f0fc60bc-35e2-4b67-d200-08d5a52b671f X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: f0fc60bc-35e2-4b67-d200-08d5a52b671f X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Apr 2018 12:53:37.3927 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR05MB2813 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-04-18_02:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1804180116 Archived-At: Subject: Re: [OPSEC] Reminder: Call for WG adoption of draft-sriram-opsec-urpf-improvements X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Apr 2018 12:53:50 -0000 > On Apr 18, 2018, at 8:20 AM, Sriram, Kotikalapudi (Fed) wrote: >> Let me mention that I think the WG should also consider potential use of >> RPKI as a complementary mechanism to improve uRPF. Namely, if there is a= n >> ROA for the prefix-origin pair, it should be allowed (even if the >> (enhanced/preferred)uRPF check fails. In a future (fantasy?) where RPKI = is >=20 > I agree with you here. When you say, "if there is an > ROA for the prefix-origin pair, it should be allowed", I think you mean > ROA for prefix-origin pair with origin AS in the ISP's customer cone. > What you propose can be done even in partial deployment of RPKI,=20 > of course not stand alone but for augmenting the RPF lists=20 > constructed with the methods proposed in the draft. It's worth emphasizing that an indirect part of the proposal in the draft i= s that RPF filters may be augmented from secondary sources. The fact we've chosen BGP routes that aren't necessarily active in forwardi= ng is one good example of it. The main operational headache of any secondary seeding of the filters thoug= h is the maintenance of their source. Both BGP and RPKI provide a distribu= ted way such things can be maintained. Observant and old-enough readers will also be reminded of the "issues" that= AOL used to have where your routes weren't used if they weren't properly r= egistered.=20 -- Jeff From nobody Thu Apr 19 07:09:59 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B32751241FC; Thu, 19 Apr 2018 07:09:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6speMxIVzJIm; Thu, 19 Apr 2018 07:09:56 -0700 (PDT) Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 057B9124D68; Thu, 19 Apr 2018 07:09:55 -0700 (PDT) Received: from pps.filterd (m0108160.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w3JDxnfl003878; Thu, 19 Apr 2018 07:09:55 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=PPS1017; bh=qz66jrxTOPNYQkNRePYN5qQI+zmwOSYRJE+Q+tgPpvo=; b=dDALo/RZe/HyoTkbJtZ78XXwparIP2tyKwOCcr6woC+HmM+FdOGSFF0RMOLUiDBsNfUF gFk5xhrS5daDNsZVOGT+YKHR1evcYw2FYEslj1NcSm0t/Bo26SsB40PsA1B6EIR6XSto yckT/5vwHtZnM1D6xBwybqmjlJnelF+84LVv9mGkaMstUjjCOv0ILUqD9O/LllcKLl5i qnMRpWOW0JWXgUb39iuYTkllaZjr4rWvaa5TvzCFQMJ+EOvv7h/+Jf24oV/qSVpNb9ZE SXeaeI1MzJIDKfPdmi8xZLd6tw7jw0NWiOGmbH85gH4wvh5DvUuAOgFevPpjkB2Cpmlj tQ== Received: from nam01-by2-obe.outbound.protection.outlook.com (mail-by2nam01lp0175.outbound.protection.outlook.com [216.32.181.175]) by mx0b-00273201.pphosted.com with ESMTP id 2heva6r1hk-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Thu, 19 Apr 2018 07:09:55 -0700 Received: from BN7PR05MB4227.namprd05.prod.outlook.com (52.132.220.153) by BN7PR05MB3938.namprd05.prod.outlook.com (52.132.216.30) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.696.8; Thu, 19 Apr 2018 14:09:53 +0000 Received: from BN7PR05MB4227.namprd05.prod.outlook.com ([fe80::ed66:e637:d102:e0ab]) by BN7PR05MB4227.namprd05.prod.outlook.com ([fe80::ed66:e637:d102:e0ab%13]) with mapi id 15.20.0715.007; Thu, 19 Apr 2018 14:09:53 +0000 From: Ron Bonica To: IETF Secretariat , "opsec@ietf.org" , "opsec-chairs@ietf.org" , "draft-sriram-opsec-urpf-improvements@ietf.org" Thread-Topic: The OPSEC WG has placed draft-sriram-opsec-urpf-improvements in state "Call For Adoption By WG Issued" Thread-Index: AQHTzEk0AGpYfzcgM0y5T0IQBDVHrqQIN0qg Date: Thu, 19 Apr 2018 14:09:53 +0000 Message-ID: References: <152286928874.24019.11348808597030240431.idtracker@ietfa.amsl.com> In-Reply-To: <152286928874.24019.11348808597030240431.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=juniper.net; x-originating-ip: [66.129.241.11] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BN7PR05MB3938; 7:9ynKjQzk37V55UrF3dxIfTmFRMMDMyLgF/TPm6EV8uKHMJgSujuu83+Fp5RhPa2WNu+qXD/KX9lPYAfrK7QDSo/6uGzx3tauWnihY2cOQJtSDMI/IHK09qC6NrHsFGl3/XSeadVGMgB4SISTsnlPD4EphCGcFNBt9R8Bj9AycfJGCX0mOcOl7vBNi3fESBa3Nd1k/6otZJ+MHmwzJpC/djZg1grXClpKPr/YMzJnya2JyqwvNgTAYBtrqGD547ot x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(2017052603328)(7153060)(7193020); SRVR:BN7PR05MB3938; x-ms-traffictypediagnostic: BN7PR05MB3938: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3002001)(10201501046)(93006095)(93001095)(3231232)(944501327)(52105095)(6055026)(6041310)(20161123558120)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123564045)(6072148)(201708071742011); SRVR:BN7PR05MB3938; BCL:0; PCL:0; RULEID:; SRVR:BN7PR05MB3938; x-forefront-prvs: 0647963F84 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(366004)(39380400002)(376002)(396003)(39860400002)(305945005)(74316002)(478600001)(2906002)(5660300001)(2201001)(102836004)(6246003)(2501003)(53936002)(476003)(55016002)(8936002)(9686003)(446003)(86362001)(76176011)(450100002)(11346002)(7696005)(25786009)(6506007)(2900100001)(66066001)(33656002)(81166006)(6436002)(26005)(8676002)(5250100002)(316002)(6116002)(3846002)(110136005)(558084003)(3280700002)(3660700001)(229853002)(7736002)(186003); DIR:OUT; SFP:1102; SCL:1; SRVR:BN7PR05MB3938; H:BN7PR05MB4227.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; MLV:sfv; x-microsoft-antispam-message-info: r+85rAPza3dTdhcTmM35JA/38lTPfFdYQX49rMqwfxcnhtnfgxaGsRTxl3Uo8t0CpZx6LCW+agBOLIT644zW2G/B9AAmkiYStrCSbNbihWwbsLLnEYX4ZPFrmPima1EpME6VZT2nUd6o/XjsPwjMRgPnpke4pPqHdYAA271sr+qaQHFR20WNB5tHT5yKDsTO spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: 904aa670-f029-4d63-7d13-08d5a5ff38ee X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: 904aa670-f029-4d63-7d13-08d5a5ff38ee X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Apr 2018 14:09:53.1784 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR05MB3938 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-04-19_05:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=897 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1804190126 Archived-At: Subject: Re: [OPSEC] The OPSEC WG has placed draft-sriram-opsec-urpf-improvements in state "Call For Adoption By WG Issued" X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Apr 2018 14:09:57 -0000 VGhlIFdHIGhhcyBleHByZXNzZWQgaW50ZXJlc3QgaW4gd29ya2luZyBvbiB0aGUgZHJhZnQgYW5k IGlzIGFkb3B0ZWQgYXMgYSBXRyBpdGVtLg0KDQpXb3VsZCB0aGUgYXV0aG9ycyBwbGVhc2Ugc3Vi bWl0IGEgdmVyc2lvbiB3aXRoIHRoZSB1cGRhdGVkIGZpbGVuYW1lLg0KDQogICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFJvbg0KDQo= From nobody Thu Apr 19 11:24:24 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7AD9C127AD4 for ; Thu, 19 Apr 2018 11:24:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yjv2x0SNTglv for ; Thu, 19 Apr 2018 11:24:21 -0700 (PDT) Received: from mail-wr0-x22f.google.com (mail-wr0-x22f.google.com [IPv6:2a00:1450:400c:c0c::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB48112706D for ; Thu, 19 Apr 2018 11:24:20 -0700 (PDT) Received: by mail-wr0-x22f.google.com with SMTP id s18-v6so16495996wrg.9 for ; Thu, 19 Apr 2018 11:24:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=to:from:subject:openpgp:autocrypt:message-id:date:user-agent :mime-version:content-language:content-transfer-encoding; bh=/HcJmpkgwn86p79mnzlZdtUVqjk2QGkl/vbDTuHRS3U=; b=dwU/q2uYtK+vSJLBFs6MuIQuzvvufTfv02/sKUXbQHV/rLBShAcrah1DQ45F+NTzo4 Kes1ILgz5j5oeG3CsmmIgZbZLdo7pkxYS8YXW/kOu1SMinTOqZhSNcpUdH+VB3Qx6vVf 8Gffb1zX7b6iSHsaHurndhkPf4Msd3iQInQt/taM95MIXoZO0MouTMubjyqph3BPOdAC 0+M2nMcGQeqkH+T4Ql49dAjbvTIfbNOZ6HPIP/uSWp1dF7c+1CAsBMtu7hAk8cpQk6Nt ZXmp00AD98xjGgSVQDzKuMUaQUoXF6Vxo9TYkBM9/zVk19KFRcNiG+ZRiciSqOvgLYZK iHVQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:openpgp:autocrypt:message-id :date:user-agent:mime-version:content-language :content-transfer-encoding; bh=/HcJmpkgwn86p79mnzlZdtUVqjk2QGkl/vbDTuHRS3U=; b=tPIzp8EKEDrGlKC7jtzaHd7gw2l3LT1Sps0z33qMt7/74CrcvMHmBN28gaAE1BgFJ9 HnBVcVACk6k04jJL5SjJE6xanH+pArV3vIscLKd31xXyGOP6r6c7bLGTm2XRqU4S93ys BITq3VQCzKwm2E2eMj4+e50NHjWfIX/l370/jZ9se8R1aBLW2hTyAPgTWWfujOY87xoJ riQxRh8Yrm7qMdK7wY00o8b7PT6OeMiKnhuy0055IOPLCwZzV4zMbqgnjkdBp/8p/Gm+ xqC4pVKAUfPlYmHd9/HY8hJGqCJhVtIw37lxGSnZ13/MwQrW9KzZx5ctIu+4GnKNbIFY /Mjg== X-Gm-Message-State: ALQs6tBm6q+zv6jVYQ9AOuvXdVb5zjU3o6a7eaFquDA/lHwzJ+CZLlNb ZIldU0D80tRLiPLx9kDYg1ItVA== X-Google-Smtp-Source: AIpwx48cxqBPyahRl4x4Y2kee+2khNPbT6D+YUHkrFk0a8vGbrWwgM7oXAGMD5uA5Z3Jiy3ekAAB0Q== X-Received: by 10.80.146.230 with SMTP id l35mr5656507eda.98.1524162259490; Thu, 19 Apr 2018 11:24:19 -0700 (PDT) Received: from admins-MacBook-Pro.local (dhcp-077-250-131-147.chello.nl. [77.250.131.147]) by smtp.googlemail.com with ESMTPSA id o61sm2641662edb.88.2018.04.19.11.24.18 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 19 Apr 2018 11:24:18 -0700 (PDT) To: opsec@ietf.org From: Andrei Robachevsky Openpgp: preference=signencrypt Autocrypt: addr=andrei.robachevsky@gmail.com; prefer-encrypt=mutual; keydata= xsDiBD8L4TQRBACI+LX/GwEK23h5OXLU7iPeZc8FJ0ywH1vVqY/gT8VCs7YzbG4GNV6omEqa 0sDBF/eYKzLC5PfaKkHeAJ51eVIcDqYDhqYNlaxr5XPWWYjOIGvVRDmp4RKxhhDgXgKMmisW RrMCCP1njNQEWYtuB64UUNit1VXbQXn2FBpEXisqxwCg6hZK7Seg5md07iu9lYQx5rng+C0D /2TkPt4t80x3Iw8WV7TSLKdEQMRG42FMIFbaZIKbiEwvfaZYNrOckxdTr8l8LvwxNxHePsVi 1sqjBR8iwtogvLhSudqXxXsj2BiYfGSpTJoiVRPKdlEzo3i1mFPV/dNTSjovzWz5c21nW9kK fUIY43sLD5aynB9WITl9O6iawOrxA/0cOwOOVrpwHdLg+Uxb9y8C/1mx3o307hZDbn84Zare aiQNOn+ETI45ucON72OoMnuaBs3fJOoreXoaOSIxuM5gSQDY/SyDqncPhZmQX8yA52fuc3Ol 8qBjEomymafFymRUFvphEr/KD9BpyBZqM41zrT5VEu2tk/ga5T+bC79W780xQW5kcmVpIFJv YmFjaGV2c2t5IDxhbmRyZWkucm9iYWNoZXZza3lAZ21haWwuY29tPsJ5BBMRCgA5AhsjBgsJ CAcDAgYVCAIJCgsEFgIDAQIeAQIXgBYhBGtZeFNYETVQoSYbeZY8+bWZrYo/BQJadGb/AAoJ EJY8+bWZrYo/pGgAoNlUk0Nu3km8dAtzOlrN5bveacodAJ4jwG65QN2EhvnTgHGQEybn9IjN 0M7ATQQ/C+E1EAQAvRN7YTDiGXS9OPLX5yDKBtvjQaR38t5zpi0ltuC5JITDKZdM6/9PCfJq QnMy+ngrI3VQdhxbduFrC5fBszo1vVMTwKrTD6D7BEsEgC3wNE5NzfzE/fjl0LkQMEf5Vxns jvbtYw2jfoyJFig2gdW4ojmBCge16RZwx7vK7Pn0z6MAAwYEAJ7zZZCCU2DZ/gPdfB3xPZVm 7XSMpG6GBz4mFGgJW/QeC2quqoKBeAEgf0icEM8ykEAPmpy8f6j0Fwe/qz/SgxOXfTlvH8O7 md6rx2t2D+1PM2PlYzwO37U5fqnPuzp5KMXlPPryuTWZmObgZMHHsko9BbpIcqNHqUNXzNwk +gjkwkYEGBECAAYFAj8L4TUACgkQljz5tZmtij/lFQCdGIvMimtJEiYiPIZYSvXI6hx8WOQA oMj/ni+WopJxWu947/5RyWR6AUpH Message-ID: <61d9d018-72fb-f9c2-491d-27a12e1cbffe@gmail.com> Date: Thu, 19 Apr 2018 20:24:17 +0200 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-GB Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [OPSEC] Call for WG adoption of draft-sriram-opsec-urpf-improvements X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Apr 2018 18:24:22 -0000 I read the draft and support the adoption of "draft-sriram-opsec-urpf-improvements" as an OPSEC Working Group document. Regards, Andrei 2018-04-04 21:15 GMT+02:00 Eric Vyncke (evyncke) ;: > As discussed during the WG meeting in London IETF-101, let's have a call > for adopting draft-sriram-opsec-urpf-improvements as an OPSEC Working > Group document. > > > > The call will last 2 weeks until 18th of April included (UTC midnight). > From nobody Fri Apr 20 11:57:41 2018 Return-Path: X-Original-To: opsec@ietf.org Delivered-To: opsec@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 063C71200F1; Fri, 20 Apr 2018 11:57:34 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: opsec@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.78.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152425065397.3480.10470575959195374129@ietfa.amsl.com> Date: Fri, 20 Apr 2018 11:57:34 -0700 Archived-At: Subject: [OPSEC] I-D Action: draft-ietf-opsec-urpf-improvements-00.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.22 List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Apr 2018 18:57:34 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Operational Security Capabilities for IP Network Infrastructure WG of the IETF. Title : Enhanced Feasible-Path Unicast Reverse Path Filtering Authors : Kotikalapudi Sriram Doug Montgomery Jeffrey Haas Filename : draft-ietf-opsec-urpf-improvements-00.txt Pages : 15 Date : 2018-04-20 Abstract: This document identifies a need for improvement of the unicast Reverse Path Filtering techniques (uRPF) [BCP84] for source address validation (SAV) [BCP38]. The strict uRPF is inflexible about directionality, the loose uRPF is oblivious to directionality, and the current feasible-path uRPF attempts to strike a balance between the two [BCP84]. However, as shown in this draft, the existing feasible-path uRPF still has short comings. This document describes an enhanced feasible-path uRPF technique, which aims to be more flexible (in a meaningful way) about directionality than the feasible-path uRPF. It can potentially alleviate ISPs' concerns about the possibility of disrupting service for their customers, and encourage greater deployment of uRPF techniques. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-opsec-urpf-improvements/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-opsec-urpf-improvements-00 https://datatracker.ietf.org/doc/html/draft-ietf-opsec-urpf-improvements-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/