[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: ICMP{,v6} type/code as a selector...




>>>>> "Dan" == Dan McDonald <danmcd@Eng.Sun.Com> writes:
    Dan> While not listed in 2401 explicitly, couldn't one use ICMP/ICMPv6 type and
    Dan> code as a selector for a security association?  The implementation wouldn't
    Dan> be that tough; just overload the already-there port fields for type and code.

  Yes, I have suggested this on numerous times, but in general, it isn't
enough to properly support ICMP.

] Train travel features AC outlets with no take-off restrictions|  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy");  [



References: