Re: [LARTC] How to recognize a IPSEC packet ?

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Jul 09, 2001 at 04:30:37PM +0200, Franck BALAZOT wrote:
> Hi all,
> 
> I want to make bandwidth management with CBQ (iproute2)
> There is no problem to manage service like FTP, HTTP,...
> We have an IPSEC VPN here, and I don't know how to reconignize IPSEC
> packets to manage the VPN bandwith.
> Is there a special port or something in the IP packet header that tells
> "here is an IPSEC packet" ?
> 

Yep, ipsec normally uses IP Protocol 50 or 51 depending on other
factors...

These numbers aren't ports, but protocols on the same level of tcp and
udp.

ipchains -A input -m 1 -p 50 (or some such...)

Mike



[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux