Re: Security Issue with RFC3195

[Darren New]

>
>
>In the current state of affairs I would venture to say that a good
>security proxy (firewall) should be able to stop or at least minimize
>the bandwith of any known covert channel (your IP tunnel), on the protocol
>it handles.
>
>
As I've said, take a look at the TUNNEL profile, under development in
the IDWG. It should help. The IDWG seems pretty happy with it.