[...]
> How could anyone build a security device that is incapable of
> filtering out packets that use 1/16th of the address space?
[...]

You missed the point.  If some software won't accept class E addresses in its 
configuration, it's a problem.  (For example a security device that just drops 
all 240/4 without being configurable to allow port-based filters or SPI or 
whatever, is just as bad since you can't use 240/4 for anything useful.)

The point is that 240/4 is simply not likely to be safe for general-purpose 
environments, only for controlled environments.

-Dave


_______________________________________________
Int-area mailing list
[email protected]
https://www1.ietf.org/mailman/listinfo/int-area

Reply via email to