At 02:46 07.10.2000, [EMAIL PROTECTED] wrote:
> >...would they want to block any authenticated IPv6 packet at the firewall?
> >...and what's about ESP? Also blocking?
>
> just curious/need clarification,
> what is your "authenticated" here? end-to-end transport mode AH
> (a guy outside of company and a guy inside company),
I meant that (IPv6 in native productive usage...)
> or tunnel mode
> (a guy outside of company transmits tunnel mode AH packet to
> the company gateway, company gateway decapsulates the packet)?
This case will break endsystem-to-endsystem security in my opinion.
Peter
---------------------------------------------------------------------
The IPv6 Users Mailing List
Unsubscribe by sending "unsubscribe users" to [EMAIL PROTECTED]