At 02:46 07.10.2000, [EMAIL PROTECTED] wrote:
> >...would they want to block any authenticated IPv6 packet at the firewall?
> >...and what's about ESP? Also blocking?
>
>         just curious/need clarification,
>         what is your "authenticated" here?  end-to-end transport mode AH
>         (a guy outside of company and a guy inside company),

I meant that (IPv6 in native productive usage...)

>  or tunnel mode
>         (a guy outside of company transmits tunnel mode AH packet to
>         the company gateway, company gateway decapsulates the packet)?

This case will break endsystem-to-endsystem security in my opinion.

         Peter


---------------------------------------------------------------------
The IPv6 Users Mailing List
Unsubscribe by sending "unsubscribe users" to [EMAIL PROTECTED]

Reply via email to