Re: [secdir] secdir review of draft-ietf-dnsop-reflectors-are-evil-04.txt

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> 
> 
> On Monday, October 01, 2007 10:34:37 AM -0600 Danny McPherson 
> <danny@xxxxxxx> wrote:
> 
> > Note that in real deployments just this behavior has broken things
> > on occasion, as many firewall and other such policy application points
> > assume things like DNS resolution will only be UDP/53 transactions.
> 
> Yeah; I'm getting a little tired of having our protocols redefined based on 
> the incorrect assumptions of people who don't understand them.  The DNS 
> sometimes uses TCP, UDP flows can last more than one round trip, and ICMP 
> unreachable messages are an essential part of IP; vendors and operators who 
> assume otherwise should be made to fix their assumptions, instead of 
> everyone else having to cripple their applications and networks to make the 
> assumptions true.
> 
> -- Jeff

	And IP fragnments exist and are useful.
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews@xxxxxxx

_______________________________________________

Ietf@xxxxxxxx
https://www1.ietf.org/mailman/listinfo/ietf

[Index of Archives]     [IETF Annoucements]     [IETF]     [IP Storage]     [Yosemite News]     [Linux SCTP]     [Linux Newbies]     [Fedora Users]