Hi Isn't SCTP just a sub-protocol of TCP/IP? If it is then you can use rules like this: iptables -A FORWARD -i eth0 -p 132 -s 1.2.3.4 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT This is what I do for protocol 47 which is used by MS VPN connections. Ray On Wed, 2003-04-30 at 14:50, Cyrille Colin wrote: > Hi, > > I would like to know how Netfilter's translator deals with SCTP / IP packets > (Stream Control Transmission Protocol, IP protocol 132). > > similarly to UDP, it should be able to translate the source adress in the IP > header, and the source port in the SCTP common header, if needed. And > recompute SCTP and IP headers checksums. > > is this currently supported ? if not how Netfilter behave when receiving > such a packet ?? > > any help on this would be very much appreciated... seems that NAT boxes do > not like SCTP very much... > > > Thanks > > Cyrille > > > > > > _________________________________________________________________ > MSN Messenger : discutez en direct avec vos amis ! > http://www.msn.fr/msger/default.asp > >
Attachment:
signature.asc
Description: This is a digitally signed message part