RE: Referenceing 3704 in OPSEC filtering document ?

["Budd, Fred" <Fred.Budd@wiltel.com>]

I think Chris' filtering capabilities draft should be modified to include the process of how the filtering rules are configured. 3704 would then be a reference to an implementation.

Regards,
Fred Budd  

-----Original Message-----
From: George Jones [mailto:eludom@gmail.com]
> There are three possibilities that come to mind immediately:
> - manual configuration (implementation being static ACLs)
> - dynamic based on something known (implementation being uRPF)
> - triggered by external source/API (implementation being shunning, quarantine, VOIP midcom pinholes)
> 
> It adds some complexity to the draft, but gives more flexibility in mapping capabilities to profiles, or requirements docs.

I'm not sure I'm following you.  What are you saying we shuold do in
which drafts (Merike's practices survey, Chris' filtering features vs. what's in 3704 now?)