Re: IPv6 RH (was Re: SPD issues)

[Bill Sommerfeld <sommerfeld@east.sun.com>]

> => we should make a distinction between a filtering mechanism and what is
> sold as a firewall

Any attempt to draw a clear distinction between "packet filtering" and
"firewall" will be doomed to failure.  

In this case, if you can subvert the intent of IPsec by adding routing
headers to packets, then we should consider independantly whether it
makes sense to add the ability to filter them to the SPD, not on
whether this is "packet filtering" or "firewalling"..


						- Bill