> I think the ability to toggle whether unlabeled packets > will be accepted or rejected for labeled networking is > required by lspp. If this is required, this is probably best accomplished by a policy rule (dis)allowing such access. Perhaps a policy boolean? > Klaus, is that correct?