Re: Microsoft.com PMTUD black hole?

1 msg	BGP issues qwest in Burbank, CA
1 msg	Looking for Yahoo-SOC contact
1 msg	Cachefly Contact
2 msg	auth*.ns.uu.net
1 msg	auth00/auth100.ns.uu.net down ?
3 msg	PCH BGP Archive down?
1 msg	Looking for Flickr contacts
2 msg	Charter - Southern Oregon routing issues
1 msg	Google Contact
1 msg	Bob Crooks/SaskTel/CA is out of the office.

Microsoft.com PMTUD black hole?
\ Nathan Anderson/FSR (6 May 2008)
. \ Brandon Butterworth (6 May 2008)
. . \ Iljitsch van Beijnum (6 May 2008)
. . . \ Nathan Anderson/FSR (6 May 2008)
. . . . \ Nathan Anderson/FSR (6 May 2008)
. . . . \ Iljitsch van Beijnum (7 May 2008)
. . . . . \ Nathan Anderson/FSR (7 May 2008)
. . . \ Bjørn Mork (7 May 2008)
. . \ Nathan Anderson/FSR (6 May 2008)
. \ Robert Bonomi (6 May 2008)
. . \ Tomas L. Byrnes (7 May 2008)
. . . \ Marshall Eubanks (7 May 2008)
. . . \ Nathan Anderson/FSR (7 May 2008)
. . \ Nathan Anderson/FSR (7 May 2008)
. . . \ Randy Bush (7 May 2008)
. . . \ Glen Turner (7 May 2008)
. . . . \ Mark Newton (7 May 2008)
. . . . \ Patrick Giagnocavo (7 May 2008)
. . . \ Rich Kulawiec (7 May 2008)
. . . . \ Nathan Anderson/FSR (7 May 2008)
. . . . . \ Michael Sinatra (7 May 2008)
. . . . . . \ Iljitsch van Beijnum (7 May 2008)
. . . . . . . \ Tomas L. Byrnes (7 May 2008)
. . . . . . . . \ Nathan Anderson/FSR (7 May 2008)
. . . . . . . . . \ Iljitsch van Beijnum (7 May 2008)
. . . . . . . . . . \ Nathan Anderson/FSR (7 May 2008)
. . . . . . . . . \ Tomas L. Byrnes (7 May 2008)
. . . . . . . . . . \ Iljitsch van Beijnum (7 May 2008)
. . . . . . . . . . . \ Tomas L. Byrnes (7 May 2008)
. . . . . . . . . . \ Nathan Anderson/FSR (7 May 2008)
. . . . . . . \ Tomas L. Byrnes (7 May 2008)
. . . . . . . . \ Nathan Anderson/FSR (7 May 2008)
. . . . . . . \ Bjørn Mork (8 May 2008)
. . . . . . . . \ Joel Jaeggli (8 May 2008)
. . . . . . . . . \ Iljitsch van Beijnum (8 May 2008)
. . . . . . . . . . \ Smith, Donald (8 May 2008)
. . . . . . \ Hank Nussbacher (8 May 2008)
. . . . . \ Deepak Jain (7 May 2008)
. . . . . . \ SML (7 May 2008)
. . . . . . \ Tony Finch (8 May 2008)
. . . . . . . \ Blaine Christian (8 May 2008)
. . \ Stephen Sprunk (7 May 2008)
. \ Iljitsch van Beijnum (7 May 2008)
. \ Nathan Anderson/FSR (7 May 2008)
. . \ Tomas L. Byrnes (7 May 2008)
. . . \ Nathan Anderson/FSR (7 May 2008)
. . . \ Matthew Petach (12 May 2008)
. \ Michael Sinatra (7 May 2008)
. \ Scott Weeks (8 May 2008)
. \ Janet Sullivan (8 May 2008)
. . \ Niels Bakker (8 May 2008)

4 msg	Strange network behaviour
1 msg	Was Burma off the air due to the Cyclone ?
17 msg	OSPF minutia, and, technote publication venues
2 msg	Deadline Extension UBICOMM 2008, September 29 -...
1 msg	[Fwd: Re: outages]
2 msg	outages
21 msg	Did Youtube not pay their domain bill?
9 msg	Introducing latency for testing?
33 msg	fair warning: less than 1000 days left to IPv4 ...

Subject:	Re: Microsoft.com PMTUD black hole?
Group:	Nanog
From:	Bjørn Mork
Date:	8 May 2008

Iljitsch van Beijnum <iljitsch> writes:

> Now Microsoft is also the company that built the OS that could be
> crashed by a maliciously crafted fragmented IP packet, so maybe
> there's something to this security policy. (One hopes that this bug
> and others like it are now fixed.)

Although the fact that Microsoft block all icmp makes me wonder which
unfixed icmp related security holes they know about...

I am not saying that there are any such holes in current Windows
versions, but I will certainly not use a Windows server in an
environment where I could receive icmp after learning that Microsoft
themselves don't trust Windows' icmp handling.

After all, Microsoft must have a reason to block all icmp. Or?

> However, in that case the only workable course of action would be TO
> DISABLE PATH MTU DISCOVERY!
>
> You can't have your cake and eat it too.

But maybe the death of icmp is worth some sort of ceremony? Cake or
not.

Bjørn

_______________________________________________
NANOG mailing list
NANOG
http://mailman.nanog.org/mailman/listinfo/nanog