RE: DNS role (RE: NATs as firewalls, cryptography, and curbing DDoS threats.)

2007-03-08 Thread Hallam-Baker, Phillip
There is this protocol called TCP that runs over IP which provides the logical connection. Sniping at the use of vocabulary is not helpful here. You are refering to the extant architecture and so the vocaulary precisely matches the concepts you wish to refer to. I am proposing to make a few mod

Re: IETF 70 & 73 Venue Locations

2007-03-08 Thread Sam Weiler
Ole writes: The Westin Vancouver is already "sold out" if you just try to book it normally on the web or by phone, but mention IETF and it works. I'm like to commend the IAD/IASA for getting reasonable cancellation terms at the Westin Bayshore. Westin reservations just told me that I could

Re: DNS role (RE: NATs as firewalls, cryptography, and curbing DDoS threats.)

2007-03-08 Thread Dave Crocker
Harald Tveit Alvestrand wrote: In my opinion, we should never introduce any function that involves the DNS where: - the answer is required to be different for different requestors - the answer has to be different at two times separated by less than ~seconds - a temporary failure of the resol

Re: [Dan Harkins] comments on draft-houseley-aaa-key-mgmt-07.txt

2007-03-08 Thread Dan Harkins
Lakshminath, Actually we're discussing my suggested additions to an individual submission that is in IESG evaluation stage. Since I do not believe they will be accepted at this point in time I don't see a point in elaborating on them here. We're intersecting on this issue for one reason and o

Re: DNS role (RE: NATs as firewalls, cryptography, and curbing DDoS threats.)

2007-03-08 Thread Douglas Otis
On Mar 8, 2007, at 2:13 AM, Brian E Carpenter wrote: On 2007-03-08 02:06, Hallam-Baker, Phillip wrote: OK I will restate. All connection initiation should be exclusively mediated through the DNS and only the DNS. Would that include connections to one's DHCP server, SLP server, default gat

Re: DNS role (RE: NATs as firewalls, cryptography, and curbing DDoS threats.)

2007-03-08 Thread Joe Abley
On 8-Mar-2007, at 10:17, Arnt Gulbrandsen wrote: A prediction: Sooner or later, IPv4 addresses become so scarce that renting a colo server with IPv4 becomes more expensive than IPv6. When that happens, a few NAT-hating spoilsports will set up the first few IPv6-only servers and a year late

Re: Prague

2007-03-08 Thread Elwyn Davies
Tim Chown wrote: On Wed, Mar 07, 2007 at 12:23:21PM -0500, Ralph Droms wrote: I visited Prague about two years ago and had the same experience as Ed. I traveled via the Metro and on foot, visited all the tourist traps; had no problems and never felt unsafe. I second that. The metro

RE: [Dan Harkins] comments on draft-houseley-aaa-key-mgmt-07.txt

2007-03-08 Thread Narayanan, Vidya
Dan, There is a fundamental security property in all that we have been discussing: It MUST NOT be possible for an entity A, impersonating as entity B, to obtain any key material that entity B may actually possess at any time. And that, I fully agree with. However, you are going further and sa

Re: DNS role (RE: NATs as firewalls, cryptography, and curbing DDoS threats.)

2007-03-08 Thread Arnt Gulbrandsen
A prediction: Sooner or later, IPv4 addresses become so scarce that renting a colo server with IPv4 becomes more expensive than IPv6. When that happens, a few NAT-hating spoilsports will set up the first few IPv6-only servers and a year later, the transition to IPv6 starts. I wonder what kind

Re: DNS role (RE: NATs as firewalls, cryptography, and curbing DDoS threats.)

2007-03-08 Thread Brian E Carpenter
Ah. Well I always learnt that an IP network was a connectionless network. Maybe you'd like to define what you mean by a connection. Brian On 2007-03-08 14:42, Hallam-Baker, Phillip wrote: DHCP: of course not, its routing address acquisition, not connection initiation Default Gateway: Again

RE: Prague

2007-03-08 Thread Hallam-Baker, Phillip
> From: Fred Baker [mailto:[EMAIL PROTECTED] > On Mar 7, 2007, at 3:57 PM, Jari Arkko wrote: > > > I think we should boldly go where no IETF has gone before (but > > millions of other people have, safely). > > I'll agree if I can change the phrase ever so slightly. > > I would like to see th

RE: DNS role (RE: NATs as firewalls, cryptography, and curbing DDoS threats.)

2007-03-08 Thread Hallam-Baker, Phillip
DHCP: of course not, its routing address acquisition, not connection initiation Default Gateway: Again no connection. DNS server: of course, it’s a tautology that interactions with the DNS are mediated by the DNS, but again its not connection initiation. The most complicated case here is SLP. T

Re: Prague

2007-03-08 Thread Janet P Gunn
Stephan, Thanks. Just what I needed. Comments in line. Stephan Wenger <[EMAIL PROTECTED]> wrote on 03/08/2007 03:26:32 AM: > Hi janet, all, > Renting a car at the airport, and from an international rental car > company, is straightforward. More expensive than in the US, > though. I cannot

Re: Prague

2007-03-08 Thread Jeff McAdams
[EMAIL PROTECTED] wrote: > In the former Soviet bloc countries, the train network was > well-developed. From personal experience in Russia and Ukraine, I > would suggest that you check out train schedules first and only > consider car rental if it doesn't work out for you. > http://www.myczechrepu

Re: NATs as firewalls

2007-03-08 Thread bmanning
On Thu, Mar 08, 2007 at 11:22:05AM -, [EMAIL PROTECTED] wrote: > > In any case, I don't have any examples to present since most of the > reclamation that has been done over the past few years was done without > any fanfare. The RIRs and the organizations involved are really the only > ones who

Re: Prague

2007-03-08 Thread Marshall Eubanks
Hello; On Mar 7, 2007, at 1:38 PM, Janet P Gunn wrote: For those of you with experience in Prague/Czech Republic- How practical is it to rent a car? There are a couple of places outside Prague I would like to visit on the weekend (in particular the JAWA Motorcycle Museum of Konopiště, abou

RE: DNS role (RE: NATs as firewalls, cryptography, and curbing DDoS threats.)

2007-03-08 Thread michael.dillon
> One approach for "name" based authorization would place an encoded > hash label of the domain name being authorized within the > authorizing > domain. Client validation can be as simple as resolving the name of > the client, where this name can then be utilized in conjunction with > a

RE: NATs as firewalls

2007-03-08 Thread michael.dillon
> Also this appears to be tied to the US business model where the ISP > supplies you with the box and you don't get to change it (or > even own it). > For example in the UK we are already down the path of selling > such a DSL > + NAT/fireewall + router box (I have one here) but the ISP > just

RE: NATs as firewalls

2007-03-08 Thread michael.dillon
> > Can you show me real examples of an RIR repossessing > address space? If > > so, what is stopping them from reclaiming some of those /8s? > > The legal costs... While ARIN would have one hell of a court > battle trying > to reclaim 18/8, the MIT Office of the President would have no trouble

RE: Prague

2007-03-08 Thread michael.dillon
> For those of you with experience in Prague/Czech Republic- > How practical is it to rent a car? > There are a couple of places outside Prague I would like to visit on the > weekend (in particular the JAWA Motorcycle Museum of Konopiště, about 20 > miles outside Prague), and I am consid

RE: NATs as firewalls

2007-03-08 Thread michael.dillon
> IPv6 is not inevitable, the issue is how to make it so. Yes, and I believe that the way to make it so is to define the standard for connecting to the IPv6 Internet. That standard should NOT be to connect a computer via dialup modem or to connect a computer via its USB port. Instead, it should b

Re: Prague

2007-03-08 Thread Brian E Carpenter
I won't ask how many we have in the Czech Republic :-) But we have a few hundred for whom it's a short flight and part of the same political and socio-economic block. Brian ___ Ietf mailing list Ietf@ietf.org https://www1.ietf.org/mailman/listinf

Re: DNS role (RE: NATs as firewalls, cryptography, and curbing DDoS threats.)

2007-03-08 Thread Brian E Carpenter
On 2007-03-08 02:06, Hallam-Baker, Phillip wrote: OK I will restate. All connection initiation should be exclusively mediated through the DNS and only the DNS. Would that include connections to one's DHCP server, SLP server, default gateway, and DNS server? Hmm... Brian

Re: Prague

2007-03-08 Thread Arnt Gulbrandsen
Tim Chown writes: On Wed, Mar 07, 2007 at 12:23:21PM -0500, Ralph Droms wrote: I visited Prague about two years ago and had the same experience as Ed. I traveled via the Metro and on foot, visited all the tourist traps; had no problems and never felt unsafe. I second that. The metro syste

Re: Prague

2007-03-08 Thread Tim Chown
On Wed, Mar 07, 2007 at 12:23:21PM -0500, Ralph Droms wrote: > I visited Prague about two years ago and had the same experience as Ed. I > traveled via the Metro and on foot, visited all the tourist traps; had no > problems and never felt unsafe. I second that. The metro system was excellent; it

Re: Prague

2007-03-08 Thread Lakshminath Dondeti
Agree with you Jari! I went to OMA meetings for about a year and every month I packed up and went to a different corner of the world, including La Jolla, some 5 miles from my house ;) (I didn't pack up for that trip!). I didn't even have the time to look up whether a particular city was this

Re: [Dan Harkins] comments on draft-houseley-aaa-key-mgmt-07.txt

2007-03-08 Thread Lakshminath Dondeti
Dan Harkins wrote: Hi Lakshminath, That's not entirely correct. As I recently stated to your colleage if a 3 party key distribution scheme finishes and all 3 parties think it finished successfully but they do not agree on all state then the scheme is flawed. Could you elaborate on what par

Re: Prague

2007-03-08 Thread Eliot Lear
Jari Arkko wrote: [...] # 13 RFCs (1.36%) have authors from Switzerland. [...] Interestingly, if you look at the top ten countries [5] there are four countries that the IETF has not been during the ten years that I have been involved. Not that we need to go everywhere, just a data point -- I kno

Re: Prague

2007-03-08 Thread Stephan Wenger
Hi janet, all, Renting a car at the airport, and from an international rental car company, is straightforward. More expensive than in the US, though. I cannot advise the budget deals you may get from local companies or individuals. Also keep in mind: a) cars of a given rental car class

Re: Prague

2007-03-08 Thread Jari Arkko
Hi Fred, > > I would like to see the IETF meet where IETF participants live. Over > time, I would expect that to include quite a few places. Agreed. > When will the IETF meet in Dubai? well, riddle me this. How many IETF > participants do we have that live in Dubai? My stats [1] do not find any

Re: Prague

2007-03-08 Thread Marshall Eubanks
Dear Fred; On Mar 8, 2007, at 1:47 AM, Fred Baker wrote: On Mar 7, 2007, at 7:58 AM, Marshall Eubanks wrote: the taxi's are ... unregulated. I would suggest that IETFers never take a cab on the street. You may pay 50 Euros to go 1 km. Get the hotel, store, restaurant, whatever, where you