i have packet labeling working prototype

Ilmar S. Habibulin ilmar at watson.org
Tue Sep 25 08:12:02 GMT 2001


TCP connections now are monitored and i can make access control desisions
based on packet label. I used CISPO in IP header and mbuf labeling (in
m_pkthdr), proposed by Robert. It's simple to reimplement it using
IPSO(RIPSO), but IMHO IPSO(RIPSO) has limited abilities.

Now i'm trying to implement something over UDP. The problem is - absence
of any standards on UDP packets handling based on labels. So i have to
develop own algorithm. Maybe someone can share some infoemation with me on
that topic?



To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-discuss" in the body of the message



More information about the trustedbsd-discuss mailing list