[Gen-art] Gen-ART Telechat review of draft-ietf-opsec-ip-options-filtering-05.txt

Suresh Krishnan <suresh.krishnan@ericsson.com> Mon, 18 November 2013 05:54 UTC

From: Suresh Krishnan <suresh.krishnan@ericsson.com>
To: "draft-ietf-opsec-ip-options-filtering.all@tools.ietf.org" <draft-ietf-opsec-ip-options-filtering.all@tools.ietf.org>
Thread-Topic: Gen-ART Telechat review of draft-ietf-opsec-ip-options-filtering-05.txt
Thread-Index: Ac7kHYXKbUMvGsBOQ6C++TIgfHbimg==
Date: Mon, 18 Nov 2013 05:54:48 +0000
Message-ID: <E87B771635882B4BA20096B589152EF62847326A@eusaamb107.ericsson.se>
Accept-Language: en-US
Content-Language: en-US
Content-Type: multipart/alternative; boundary="_000_E87B771635882B4BA20096B589152EF62847326Aeusaamb107erics_"
MIME-Version: 1.0
Cc: "General Area Review Team (gen-art@ietf.org)" <gen-art@ietf.org>
Subject: [Gen-art] Gen-ART Telechat review of draft-ietf-opsec-ip-options-filtering-05.txt
Precedence: list

I have been selected as the General Area Review Team (Gen-ART) reviewer
for this draft (for background on Gen-ART, please see
http://www.alvestrand.no/ietf/gen/art/gen-art-FAQ.html).

Please wait for direction from your document shepherd or AD before
posting a new version of the draft.

Document: draft-ietf-opsec-ip-options-filtering-05.txt
Reviewer: Suresh Krishnan
Review Date: 2013/11/17
IESG Telechat date: 2013/11/21

Summary: This draft is almost ready for publication as a BCP but
I do have some issues that you may wish to consider

* Sections 4.12.5 and 4.13.5

Since these options are supposed to be used in closed environments,
how likely are these options to appear in the wild? Even if they do,
isn't it a symptom of a misconfiguration somewhere. Given this, I
would have expected the recommendation to read

Routers, security gateways, and firewalls ... SHOULD by default drop
packets because they contain this option...

but the recommendation is "SHOULD NOT by default". I think It would
be good if there was some reasoning attached to this recommendation.
Without such reasoning, I think this recommendation will probably not
be followed.

* Section 4.22.5

Have you considered that the default behavior for the option could be related
to the option class. E.g. Class 2 would default to ignore and forward and
class 0 would default to drop and log.

* Section 4.23.4

It would be good to specify a default for this knob.

Thanks
Suresh

[Gen-art] Gen-ART Telechat review of draft-ietf-o… Suresh Krishnan
Re: [Gen-art] Gen-ART Telechat review of draft-ie… Carlos Pignataro (cpignata)
Re: [Gen-art] Gen-ART Telechat review of draft-ie… Jari Arkko
Re: [Gen-art] Gen-ART Telechat review of draft-ie… Carlos Pignataro (cpignata)
[Gen-art] Fwd: Gen-ART Telechat review of draft-i… Carlos Pignataro (cpignata)
Re: [Gen-art] Gen-ART Telechat review of draft-ie… Jari Arkko