Subject: [rddp] L3 Layering as Security Issue

From: Caitlin Bestler <[email-masked]>
Date: Fri, 9 May 2003 20:57:08 -0500

We've been concentrating on being cleanly layered of L4,
while allowing rototilling, that I think we forgot to kick
the tires on L3 layering.

Specifically, expecting RNICs to enforce local in-host
firewall rules would be a) difficult and b) not very useful.

With all proper layering, a DDP Segment contained within
an IP Datagram that the local firewall rules will drop
should not result in placement to user memory let alone
a valid completion.

Realistically, it is highly unlikely that an IP Datagram
that is part of an established TCP connection or SCTP
association will not pass the firewall rules.

Rather than hoping for a standard interface between RNICs
and in-host firewalls I would suggest we just add a section
to the security concerns section that documents that
firewall rules should be drafted to prevent the TCP
connection or SCTP association from being established.
Once a DDP Stream is up and running it is might not
be affect by an in-host firewall.

Caitlin Bestler
http://asomi.com/CaitlinBestler/
_______________________________________________
rddp mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/rddp