Thread-topic: Why Scopes? (was: Re: [saad] About saad)
> Erik Nordmark
> Having a conceptual model with 3 top-level classes defined in the
> firewall
> 1. no communication through the firewall
> 2. outbound only
> 3. open
> is simple enough to prevent unintended side-effects of other
> filters.
Even if we could force firewall vendors to do this (which we can't) it's
not flexible enough. A significant part of access control is performed
by regular routers and there we can't pre-define which interface belongs
to which class, it's all configuration that unfortunately can be
SNAFUed.
Michel.
_______________________________________________
Saad mailing list
Saad@ietf.org
https://www1.ietf.org/mailman/listinfo/saad
