@p @amerika @h4890 @cjd @sj_zero @threalist
> The idea is that no data comes in; what do you really care if you lose some of the distinctions?

Well MTU isn't really a distinction and AFAIK PPP doesn't fragments packets, that sounds more like something a proxy would do rather than basically network encapsulation.

And yeah for near-air-gap where a bit of connectivity issue wouldn't be much of a problem it's okay. That said at that level I'd use a filtering proxy, or even see if anything can be pushed to a machine with read-only storage with maybe some queries to the machine you want to isolate.

> Like, in general, right?
Yup.