Network Data Flow in MLS

Note that origin and destination IP address are tagged with security labels. The IP address (or port address) can be used to create a security zone or domain by getting a label. All involved security labels need to be equivalent (read/write) except for the first read (which is read only).