Additional filtering criteria based on protocol

The following criteria are some additional filtering criteria that are based on protocol:

• ICMP type and code

  If the protocol in an IP packet is ICMP or ICMPv6, the packet can be filtered based on the ICMP type and code located in the ICMP header of the data portion of the packet.

  Guideline: Typically, if an ICMP error is generated for a packet that arrived over a Security Association, and there is no matching rule for the ICMP error, z/OS® Communications Server attempts to send the ICMP packet over the same Security Association that carried the original packet. If you want to disable this processing, you must code a rule that covers ICMP errors.
• OSPF type

  If the protocol in an IP packet is OSPF, the packet can be filtered based on the OSPF type located in the OSPF header of the data portion of the packet.

• Mobility header type

  If the protocol in an IP packet is IPv6 mobility header, the packet can be filtered based on the mobility header type located in the mobility header of the data portion of the packet.