[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: I-D.ietf-v6ops-cpe-simple-security-09 - ICMP Error Messages + Vocabulary

1.
Le 11 mars 2010 à 21:17, james woodyatt a écrit :
> ...
>> - Forwarded error messages ... must be more general than just Destination Unreachable: they must include in particular Packet Too Big notifications which are essential for IPv6 path-MTU discovery.
> 
> Agreed, but I'm now inclined to remove all four of those recommendations and insert an explicit recommendation into the "Stateless Filters" section that cites RFC 4890 and specifically references section 4.3.1 "Traffic The Must Not Be Dropped".
> 
> Does anyone object to that revision?

No objection, and active support for this approach.
(You are right, ICMP is at the IP layer, not at the transport layer.)


2.
The draft uses "interior" and "exterior", while the traditional vocabulary for NATs is AFAIK "internal" and "external" (e.g. in RFC 4787).
A suggestion would be to align the vocabulary. 


RD