netsec-assignment4-S4498062/exercise4/exercise4b


1
2
3
4
5
6

This is in REQ-5. Error messages should only be in an existing session, so these
packets SHOULD be dropped. However, there does not seem to be any risk with for-
warding those packets (which is why it is no MUST).

For messages belonging to an existing session, the source address should be
translated and the packet should be forwarded to the external realm.