Re: Some thoughts on the Chinese Net

[lmccarth@cs.umass.edu]

tallpaul writes: 
[re: hypothetical Chinese IP address-based filtering]
> Assuming this system is estabished, then we would want to modify our
> remailers to strip IP packet information as well as normal header, no? 

I'm not entirely sure what you mean. Present remailers don't save anything
except for (parts of) RFC 822 message bodies, and occasionally some SMTP
mail headers. Certainly no packet-level headers (like IP) are saved at all.

Presumably The Chinese Wall (and many other gateways, routers, etc.) would
simply drop any packets that managed to arrive without originating IP address
information. You could use something that emits packets with "incorrect" /
"forged" IP headers, but that crosses an ethical line that I consider rather
important not to cross. The IPsec WG has been working on interhost 
authentication that should render the point moot, anyway.

-Lewis	"You're always disappointed, nothing seems to keep you high -- drive 
	your bargains, push your papers, win your medals, fuck your strangers;
	don't it leave you on the empty side ?"  (Joni Mitchell, 1972)