From d3e839f69892ad48d432ccbe61adc76be51e7267 Mon Sep 17 00:00:00 2001 From: David Schinazi Date: Wed, 12 Apr 2023 15:53:57 -0700 Subject: [PATCH 1/2] Clarify ICMP outside of scoping target --- draft-ietf-masque-connect-ip.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/draft-ietf-masque-connect-ip.md b/draft-ietf-masque-connect-ip.md index f157b3d..2818260 100644 --- a/draft-ietf-masque-connect-ip.md +++ b/draft-ietf-masque-connect-ip.md @@ -899,7 +899,8 @@ In order to receive these errors, endpoints need to be prepared to receive ICMP packets. If an endpoint does not send ROUTE_ADVERTISEMENT capsules, such as a client opening an IP flow through an IP proxy, it SHOULD process proxied ICMP packets from its peer in order to receive these errors. Note that ICMP messages -can originate from a source address different from that of the IP proxying peer. +can originate from a source address different from that of the IP proxying +peer, and also from outside the target if scoping is in use. # Examples From e46b306f2c06613a4d6f50e19f00bc5f7278722e Mon Sep 17 00:00:00 2001 From: David Schinazi Date: Wed, 12 Apr 2023 18:52:39 -0700 Subject: [PATCH 2/2] add ref --- draft-ietf-masque-connect-ip.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/draft-ietf-masque-connect-ip.md b/draft-ietf-masque-connect-ip.md index 2818260..76a785b 100644 --- a/draft-ietf-masque-connect-ip.md +++ b/draft-ietf-masque-connect-ip.md @@ -900,7 +900,7 @@ packets. If an endpoint does not send ROUTE_ADVERTISEMENT capsules, such as a client opening an IP flow through an IP proxy, it SHOULD process proxied ICMP packets from its peer in order to receive these errors. Note that ICMP messages can originate from a source address different from that of the IP proxying -peer, and also from outside the target if scoping is in use. +peer, and also from outside the target if scoping is in use (see {{scope}}). # Examples