Transparent Network Security Policy Enforcement

Whitepaper by OpenBSD developers Angelos Keromytis and Jason Wright presented at USENIX Technical Conference, June 2000.

About this document ...

About this document ... ... About this document ... Transparent Network Security Policy Enforcement. This document was generated using the LaTeX2HTML ...

Transparent Policy Enforcement

Transparent Policy Enforcement. ... Transparent Policy Enforcement. While the mechanism described in the previous subsection is useful in its own right, ...

Virtual LANs

Virtual LANs. ... Virtual LANs. Given the way the bridging code operates, in particular with respect to member interfaces being added to and removed from ...

OpenBSD IPsec

OpenBSD IPsec. ... OpenBSD IPsec. IPsec in the OpenBSD kernel is implemented as a pair of transport protocols [7,8]. Incoming IPsec packets are switched to ...

Bridging and IPsec

Bridging and IPsec. ... Bridging and IPsec. The filtering capabilities offered by the bridge allow its use as a transparent packet filtering firewall. ...

Introduction

Introduction. ... Introduction. Network bridges are simple devices that transparently connect two or more LAN segments by storing a frame received from one ...

Bump In The Wire

Bump In The Wire. ... Bump In The Wire. As mentioned in section 3, the bridge can also be used as a transparent IPsec box, sitting in front of a host or ...

Bridge

Bridge. ... Bridge. Bridges are devices that operate at the data link layer, tying together different ethernet (or other LAN) segments. ...

References

References. ... References. 1: SM Bellovin. Distributed Firewalls. ;login: magazine, special issue on security, November 1999. 2: Consultation Committee. ...