Re: TO COMPRESS OR NOT TO CMPRS (please reply)

"Angelos D. Keromytis" <angelos@aurora.cis.upenn.edu> Wed, 19 February 1997 19:59 UTC

Received: (from majordom@localhost) by portal.ex.tis.com (8.8.2/8.8.2) id OAA26331 for ipsec-outgoing; Wed, 19 Feb 1997 14:59:30 -0500 (EST)
Posted-Date: Wed, 19 Feb 1997 15:00:56 +0000
Message-Id: <9702192003.AA92184@aurora.cis.upenn.edu>
To: "C. Harald Koch" <chk@utcc.utoronto.ca>
Cc: Bill Sommerfeld <sommerfeld@apollo.hp.com>, ipsec@tis.com
Subject: Re: TO COMPRESS OR NOT TO CMPRS (please reply)
In-Reply-To: Your message of "Wed, 19 Feb 1997 14:10:33 EST." <97Feb19.141142est.11653@elgreco.rnd.border.com>
Date: Wed, 19 Feb 1997 15:00:56 +0000
From: "Angelos D. Keromytis" <angelos@aurora.cis.upenn.edu>
Sender: owner-ipsec@ex.tis.com
Precedence: bulk

-----BEGIN PGP SIGNED MESSAGE-----


In message <97Feb19.141142est.11653@elgreco.rnd.border.com>, "C. Harald Koch" w
rites:
>
>Yes, but isn't that a Hard Problem (tm) unless you keep state (either
>"virtual interfaces" or individual packets) at the tunnel endpoints? How
>else do you convert an ICMP Fragmentation Required message for a tunneled
>(and auth'd and 'crypted) packet back into an ICMP Fragmentation Required
>for the original, untunnelled packet?

Check the archives for a discussion on this about 2 weeks ago.
I don't think this is a hard problem.
- -Angelos

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv
Comment: Processed by Mailcrypt 3.4, an Emacs/PGP interface

iQCVAwUBMwtb970pBjh2h1kFAQHougQAhRiBb2pCqrE1SRIt9PNvtQM+kc2QPzDZ
g6+GG6DSZQpwhC2LYN54r17yPo0L26dpk+ZXmNrbLY9xcmQADZyatbXdgJGp3YOX
2wGSvFdd/4dOMqCzFr+SDvKduBThQC/CUXDDJM7EOKVgB4O/8zxwJNfQ+i1k0nSy
VXdh98vYysg=
=41Nw
-----END PGP SIGNATURE-----