Re: [DNSOP] I-D Action: draft-bellis-dnsop-qdcount-is-one-01.txt

2023-10-02 Thread Joe Abley
Op 2 okt 2023 om 11:04 heeft libor.peltan het volgende geschreven: > I would even rather see a recommendation that firewalls and middleboxes > don't do any kind of DNS packet handling. Why should they? DNS traffic is for > DNS servers and they are the most capable entity for handling them,

Re: [DNSOP] I-D Action: draft-bellis-dnsop-qdcount-is-one-01.txt

2023-10-02 Thread libor.peltan
I would even rather see a recommendation that firewalls and middleboxes don't do any kind of DNS packet handling. Why should they? DNS traffic is for DNS servers and they are the most capable entity for handling them, including FORMERR responses on wrongly formatted queries. Libor Dne 29.

Re: [DNSOP] I-D Action: draft-bellis-dnsop-qdcount-is-one-01.txt

2023-09-28 Thread Joe Abley
Op 29 sep 2023 om 00:09 heeft Robert Edmonds het volgende geschreven: > noticed that Section 4 of the draft states: > > Firewalls that process DNS messages in order to eliminate unwanted > traffic SHOULD treat messages with OPCODE = 0 and QDCOUNT > 1 as > malformed traffic. See Section

Re: [DNSOP] I-D Action: draft-bellis-dnsop-qdcount-is-one-01.txt

2023-09-28 Thread Robert Edmonds
Hi, I noticed that Section 4 of the draft states: Firewalls that process DNS messages in order to eliminate unwanted traffic SHOULD treat messages with OPCODE = 0 and QDCOUNT > 1 as malformed traffic. See Section 4 of [RFC8906] for further guidance. However, I couldn't find the

Re: [DNSOP] I-D Action: draft-bellis-dnsop-qdcount-is-one-01.txt

2023-09-28 Thread Joe Abley
Hi Eric, On 28 Sep 2023, at 18:15, Eric Orth wrote: > Minor remaining complaints (that I'm not going to fight over, so ignore if > you really disagree): > * I think all the stuff now in the appendix would be even better as a > separate Informational draft. In my mind, appendix is acceptable,

Re: [DNSOP] I-D Action: draft-bellis-dnsop-qdcount-is-one-01.txt

2023-09-28 Thread Eric Orth
I think this generally resolves my main concerns about the previous draft hiding the normative changes behind all the history and justification. Thanks for the update. Minor remaining complaints (that I'm not going to fight over, so ignore if you really disagree): * I think all the stuff now in

Re: [DNSOP] I-D Action: draft-bellis-dnsop-qdcount-is-one-01.txt

2023-09-28 Thread Tim Wicinski
Thanks Joe for pulling this together. tim On Thu, Sep 28, 2023 at 10:57 AM Ted Lemon wrote: > Thanks for the update. I think this does the job. I could do without the > appendix, but I understand the urge to fully document. :) > > On Thu, Sep 28, 2023 at 9:40 AM Joe Abley wrote: > >> Hi all,

Re: [DNSOP] I-D Action: draft-bellis-dnsop-qdcount-is-one-01.txt

2023-09-28 Thread Ted Lemon
Thanks for the update. I think this does the job. I could do without the appendix, but I understand the urge to fully document. :) On Thu, Sep 28, 2023 at 9:40 AM Joe Abley wrote: > Hi all, > > This version mainly incorporates feedback from the room at the last > meeting and relate to document

Re: [DNSOP] I-D Action: draft-bellis-dnsop-qdcount-is-one-01.txt

2023-09-28 Thread Joe Abley
Hi all, This version mainly incorporates feedback from the room at the last meeting and relate to document clarity; the advice is unchanged. Joe > On 28 Sep 2023, at 15:21, internet-dra...@ietf.org wrote: > > Internet-Draft draft-bellis-dnsop-qdcount-is-one-01.txt is now available. It > is

[DNSOP] I-D Action: draft-bellis-dnsop-qdcount-is-one-01.txt

2023-09-28 Thread internet-drafts
Internet-Draft draft-bellis-dnsop-qdcount-is-one-01.txt is now available. It is a work item of the Domain Name System Operations (DNSOP) WG of the IETF. Title: In the DNS, QDCOUNT is (usually) One Authors: Ray Bellis Joe Abley Name: