Re: Traffic selectors, fragments, ICMP messages and security policy problems

[Michael Richardson <mcr@sandelman.ottawa.on.ca>]

Steve and Thor post about situations where there are per-port selectors
between two hosts. That does not present a fragmentation problem - you
do not need to accumulate fragments to make the decision.

The situation where this is necessary is BITS, BITW.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] mcr@xelerance.com      http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [