Re: [OPSEC] Prospective issue with IPsec ESP-NULL & IGP packets

Hi Ran,

As you have sent so many mails with so much text would it be possible
for you to point out which mail I should read.

I am unable to understand how you can say ESP packets can be filtered
at the edge based on the content. That is a problem IPsecme is trying
to solve.

Thanks,
Vishwas

On Wed, Dec 17, 2008 at 8:21 AM, R Atkinson <ran.atkinson@gmail.com> wrote:
>
> On  17 Dec 2008, at 11:14, Vishwas Manral wrote:
>>
>> Ran, the point we were talking is about the packet actually not being
>> able to be filtered by the edge node/ device because the packet is
>> encapsulated in the ESP header. Is there something amiss here - when
>> you say such a packet can be filtered?
>
> Please go re-read my note to OPsec from yesterday
> for the full analysis.
>
> Cheers,
>
> Ran
>
> _______________________________________________
> OPSEC mailing list
> OPSEC@ietf.org
> https://www.ietf.org/mailman/listinfo/opsec
>
_______________________________________________
OPSEC mailing list
OPSEC@ietf.org
https://www.ietf.org/mailman/listinfo/opsec