nanog mailing list archives
Re: The End-To-End Internet (was Re: Blocking MX query)
From: Michael Thomas <mike () mtcc com>
Date: Tue, 04 Sep 2012 13:19:04 -0700
On 09/04/2012 01:07 PM, David Miller wrote:
There is no requirement that all endpoints be *permitted* to connect to and use any service of any other endpoint. The end-to-end design principle does not require a complete lack of authentication or authorization. I can refuse connections to port 25 on my endpoint (mail server) from hosts that do not conform to my requirements (e.g. those that do not have forward-confirmed reverse DNS) without violating the end-to-end design principle in any way.
The thing that has never set well with me with ISP blanket port 25 blocking is that the fate sharing is not correct. If I have a mail server and I refuse to take incoming connects from dynamic "home" IP blocks, the fate sharing is correct: I'm only hurting myself if there's collateral damage. When ISP's have blanket port 25, the two parties of the intended conversation never get a say: things just break mysteriously as far as both parties are concerned, but the ISP isn't hurt at all. So they have no incentive to drop their false positive rate. That's not good. Mike
Current thread:
- Re: The End-To-End Internet (was Re: Blocking MX query), (continued)
- Re: The End-To-End Internet (was Re: Blocking MX query) Sean Harlow (Sep 05)
- Re: The End-To-End Internet (was Re: Blocking MX query) Jimmy Hess (Sep 05)
- Re: The End-To-End Internet (was Re: Blocking MX query) John Levine (Sep 06)
- Re: The End-To-End Internet (was Re: Blocking MX query) Sean Harlow (Sep 04)
- Re: The End-To-End Internet (was Re: Blocking MX query) William Herrin (Sep 04)
- Re: The End-To-End Internet (was Re: Blocking MX query) Jay Ashworth (Sep 04)
- Re: The End-To-End Internet (was Re: Blocking MX query) Izaac (Sep 05)
- Re: The End-To-End Internet (was Re: Blocking MX query) TJ (Sep 07)
- Re: The End-To-End Internet (was Re: Blocking MX query) David Miller (Sep 04)
- Re: The End-To-End Internet (was Re: Blocking MX query) Michael Thomas (Sep 04)
- Re: The End-To-End Internet (was Re: Blocking MX query) Jimmy Hess (Sep 05)
- Re: The End-To-End Internet (was Re: Blocking MX query) Masataka Ohta (Sep 05)
- Re: The End-To-End Internet (was Re: Blocking MX query) valdis . kletnieks (Sep 05)
- Re: The End-To-End Internet (was Re: Blocking MX query) Masataka Ohta (Sep 05)
- Re: The End-To-End Internet (was Re: Blocking MX query) Owen DeLong (Sep 05)
- Re: The End-To-End Internet (was Re: Blocking MX query) Cameron Byrne (Sep 05)
- Re: The End-To-End Internet (was Re: Blocking MX query) Masataka Ohta (Sep 05)
- Re: The End-To-End Internet (was Re: Blocking MX query) Oliver (Sep 06)
- Re: The End-To-End Internet (was Re: Blocking MX query) Masataka Ohta (Sep 06)
- Re: The End-To-End Internet (was Re: Blocking MX query) Owen DeLong (Sep 06)