<html><head><meta http-equiv="Content-Type" content="text/html charset=gb2312"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Thank you for the pointer to RFC5358 which is exactly what I would like to suggest. <div class="">It does aim for open resolver to adopt the recommended configuration.<div class=""><div style="widows: 1;" class=""><font color="#333333" class=""><span style="white-space: pre; background-color: rgba(255, 255, 255, 0.498039);" class=""><br class=""></span></font></div><div style="widows: 1;" class=""><font color="#333333" class=""><span style="background-color: rgba(255, 255, 255, 0.498039);" class=""><span style="white-space: pre;" class="">The resolvers of ISPs and enterprises have fixed groups of users belongs to the same </span></span></font></div><div style="widows: 1;" class=""><font color="#333333" class=""><span style="background-color: rgba(255, 255, 255, 0.498039);" class=""><span style="white-space: pre;" class="">administration , in which there is little reason not implementing RFC5358. </span></span></font><font color="#333333" class=""><span style="background-color: rgba(255, 255, 255, 0.498039);" class=""><span style="white-space: pre;" class="">For open </span></span></font></div><div style="widows: 1;" class=""><span style="white-space: pre; background-color: rgba(255, 255, 255, 0.498039); color: rgb(51, 51, 51);" class="">resolver like Google, OpenDNS, DYN, 114DNS which is based on global/national anycast, </span></div><div style="widows: 1;" class=""><font color="#333333" class=""><span style="background-color: rgba(255, 255, 255, 0.498039);" class=""><span style="white-space: pre;" class="">the query is most likely </span></span><span style="white-space: pre;" class="">responded by the nearest anycast node which definitely knows the </span></font></div><div style="widows: 1;" class=""><font color="#333333" class=""><span style="white-space: pre;" class="">IP range of their frequent users. So RFC5358 is also applicable for such kind of open resolver.</span></font></div><div style="widows: 1;" class=""><font color="#333333" class=""><span style="white-space: pre;" class=""><br class=""></span></font></div><div style="widows: 1;" class=""><font color="#333333" class=""><span style="white-space: pre;" class="">So my intuitive question is when DNS people ask network operator </span></font><span style="color: rgb(51, 51, 51); white-space: pre;" class="">strongly </span><font color="#333333" class=""><span style="white-space: pre;" class="">to adopt BCP38 </span></font></div><div style="widows: 1;" class=""><font color="#333333" class=""><span style="white-space: pre;" class="">to encounter source address spoofing, </span></font><span style="white-space: pre; color: rgb(51, 51, 51);" class="">should they consider BCP140 in the first place? </span></div><div style="widows: 1;" class=""><span style="white-space: pre; background-color: rgba(255, 255, 255, 0.498039); color: rgb(51, 51, 51);" class=""><br class=""></span></div><div style="widows: 1;" class=""><span style="white-space: pre; background-color: rgba(255, 255, 255, 0.498039); color: rgb(51, 51, 51);" class="">Davey</span></div><div style="widows: 1;" class=""><font color="#333333" class=""><span style="white-space: pre; background-color: rgba(255, 255, 255, 0.498039);" class=""><br class=""></span></font></div><div><blockquote type="cite" class=""><div class="">在 2015年12月21日，13:17，Paul Vixie <<a href="mailto:paul@redbarn.org" class="">paul@redbarn.org</a>> 写道：</div><br class="Apple-interchange-newline"><div class=""><div style="white-space: pre-wrap; font-family: 'Droid Sans Mono'; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; margin: 0px;" class="">Song Linjian (Davey) songlinjian at <a href="http://gmail.com/" class="">gmail.com</a> (Mon Dec 21 02:00:38 UTC 2015):</div><p style="white-space: pre-wrap; font-family: 'Droid Sans Mono'; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; margin: 0px;" class=""> </p><div style="white-space: pre-wrap; font-family: 'Droid Sans Mono'; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; margin: 0px;" class="">> How about source validation on open resolvers themselves?</div><div style="white-space: pre-wrap; font-family: 'Droid Sans Mono'; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; margin: 0px;" class="">> which means all open resolvers only serve it’s local users.</div><p style="white-space: pre-wrap; font-family: 'Droid Sans Mono'; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; margin: 0px;" class=""> </p><div style="white-space: pre-wrap; font-family: 'Droid Sans Mono'; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; margin: 0px;" class="">in that case they would not be "open" resolvers. see RFC 5358.</div><p style="white-space: pre-wrap; font-family: 'Droid Sans Mono'; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; margin: 0px;" class=""> </p><div style="white-space: pre-wrap; font-family: 'Droid Sans Mono'; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; margin: 0px;" class="">-- </div><div style="white-space: pre-wrap; font-family: 'Droid Sans Mono'; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; margin: 0px;" class="">P Vixie</div><span style="font-family: 'Droid Sans Mono'; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">_______________________________________________</span><br style="font-family: 'Droid Sans Mono'; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: 'Droid Sans Mono'; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">dns-operations mailing list</span><br style="font-family: 'Droid Sans Mono'; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="mailto:dns-operations@lists.dns-oarc.net" style="font-family: 'Droid Sans Mono'; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">dns-operations@lists.dns-oarc.net</a><br style="font-family: 'Droid Sans Mono'; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" style="font-family: 'Droid Sans Mono'; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a><br style="font-family: 'Droid Sans Mono'; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: 'Droid Sans Mono'; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">dns-jobs mailing list</span><br style="font-family: 'Droid Sans Mono'; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="https://lists.dns-oarc.net/mailman/listinfo/dns-jobs" style="font-family: 'Droid Sans Mono'; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">https://lists.dns-oarc.net/mailman/listinfo/dns-jobs</a></div></blockquote></div><br class=""><div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">---------------------------</div><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Davey Song(宋林健)<br class="">BII Lab<br class=""><a href="mailto:ljsong@biigroup.cn" class="">ljsong@biigroup.cn</a><br class=""><br class=""><br class=""></div></div>
</div>
<br class=""></div></div></body></html>