Fernando, Adding this text has the merit of being clear.
Two comments: 1) for the transition period (when we could perhaps see those packets -- even if I have yet to see one!), 'silently' is perhaps too strong, I would suggest at the bare minimum a dropped packet counter (else operators would be blind) 2) RFC1858 (the IPv4 equivalent of your I-D) specifies that routers with an ACL must also drop those packets and I would think that this should also be the case here but with a SHOULD for router implementing layer-4 ACL (not for plain forwarding routers or layer-3 ACL) Hope it helps -éric > -----Original Message----- > From: [email protected] [mailto:[email protected]] On Behalf Of > Fernando Gont > Sent: mercredi 18 juillet 2012 22:37 > To: [email protected] > Subject: oversized-header-chains: Receipt of illegal first-fragments > > Folks, > > There's one issue that came up during my recent exchange with Suresh on > which I'd like others (including Suresh) to weigh in: > > Since first-fragments that fail to include the entire header chain will be > illegal, I think it would be appropriate to include an additional > requirement in draft-ietf-6man-oversized-header-chain along the lines of: > > "A host that receives a first-fragment that fails to include the entire > IPv6 header chain MUST silently drop the aforementioned fragment". > > Clearly, since such packets are illegal, they shouldn't exist in the first > place... so dropping them makes sense. > > Thoughts? > > Thanks! > > Best regards, > -- > Fernando Gont > SI6 Networks > e-mail: [email protected] > PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 > > > > > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > [email protected] > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- -------------------------------------------------------------------- IETF IPv6 working group mailing list [email protected] Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 --------------------------------------------------------------------
