Update draft-ietf-masque-connect-ip.md

ietf-wg-masque · Apr 19, 2023 · 1ffa585 · 1ffa585
1 parent cee670a
commit 1ffa585
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/draft-ietf-masque-connect-ip.md b/draft-ietf-masque-connect-ip.md
@@ -738,10 +738,11 @@ UDP) and IPv6 extension headers (as defined in {{Section 4 of IPv6}}, examples
 include Fragment and Options headers). IP proxies MAY reject requests to scope
 to protocol numbers that are used for extension headers. Upon receiving
 packets, implementations that support scoping or routing by IP protocol number
-MUST walk the chain of extensions to find the matching IP protocol number. Note
-that the ROUTE_ADVERTISEMENT capsule uses IP protocol number 0 to indicate that
-all protocols are allowed, it does not restrict the route to the IPv6
-Hop-by-Hop Options Header ({{Section 4.3 of IPv6}}).
+MUST walk the chain of extensions to find outermost non-extension IP protocol
+number to match against the scoping rule. Note that the ROUTE_ADVERTISEMENT
+capsule uses IP protocol number 0 to indicate that all protocols are allowed,
+it does not restrict the route to the IPv6 Hop-by-Hop Options Header
+({{Section 4.3 of IPv6}}).
 
 # Context Identifiers