Version -06 includes fixes for the typos, and is also more explicit about the
fact that certain fields are included only if the corresponding flags are set in
the initial word.
The object syntax still allows 'meaningless' MRIs to be constructed, for
example, setting both S (SPI) and A/B (port) flags, or setting S when the
protocol number is not one of the IPsec protocols. However, rather than trying
to pin down exactly what combinations are acceptable in the bit-level syntax, it
seems more reasonable to rely on
a) common sense, and
b) helpful error messages which can be generated by an node receiving a
combination which it regards as unreasonable.
|