Merge pull request #157 from ietf-wg-masque/icmp_scope

Clarify ICMP outside of scoping target
ietf-wg-masque · Apr 13, 2023 · 57f6610 · 57f6610
2 parents 67c6258 + e46b306
commit 57f6610
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/draft-ietf-masque-connect-ip.md b/draft-ietf-masque-connect-ip.md
@@ -908,7 +908,8 @@ In order to receive these errors, endpoints need to be prepared to receive ICMP
 packets. If an endpoint does not send ROUTE_ADVERTISEMENT capsules, such as a
 client opening an IP flow through an IP proxy, it SHOULD process proxied ICMP
 packets from its peer in order to receive these errors. Note that ICMP messages
-can originate from a source address different from that of the IP proxying peer.
+can originate from a source address different from that of the IP proxying
+peer, and also from outside the target if scoping is in use (see {{scope}}).
 
 # Examples