This table lists all the policy group combinations and expected packet flows.

policy | none | clear | clear-or-private | private-or-clear | private | block | |||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|

key? | no | yes | no | yes | no | yes | no | yes | no | yes | no | yes | |

none | no | c | c | c | c | c | c | c | c | c,f | c,f | c,f | c,f |

yes | c | c | c | c | c | c | c,f? | c,f? | c,f | c,f | c,f | c,f | |

clear | no | c | c | c | c | c | c | c | c,c(f?) | c,f | c,f | c,f | c,f |

yes | c | c | c | c | c | c | c,f? | c,f? | c,f | c,f | c,f | c,f | |

clear-or-private | no | c | c | c | c | c | c | c,f? | c,c(f?) | c,f | c,f | c,f | c,f |

yes | c | c | c | c | c | c | c,f? | c,e | c,f | c,e | c,f | c,f | |

private-or-clear | no | t,c | t,f? | t,c | t,f? | t,c | t,f? | t,f? | t,f? | t,f | t,f | t,f | t,f |

yes | t,c | t,f? | t,c | t,f? | t,c | t,e | t,c(f?) | t,e | t,f | t,e | t,f | t,f | |

private | no | t,f | t,f | t,f | t,f | t,f | t,f | t,f | t,f | t,f | t,f | t,f | t,f |

yes | t,f | t,f | t,f | t,f | t,f | t,e | t,f | t,e | t,f | t,e | t,f | t,f | |

block | no | f | f | f | f | f | f | f | f | f | f | f | f |

yes | f | f | f | f | f | f | f | f | f | f | f | f |

legend | packet fate |
---|---|

c | clear |

f | fail |

e | encrypt |

t | trap |

c,f |
first packet clear, then fail |

c,e |
first packet clear, then encrypt |

t,f |
trap, then fail |

t,c |
trap, then clear |

t,e |
trap, then encrypt |