Re: Netfilter and SCTP

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi

Isn't SCTP just a sub-protocol of TCP/IP?

If it is then you can use rules like this:

iptables -A FORWARD -i eth0 -p 132 -s 1.2.3.4 -m state --state
NEW,ESTABLISHED,RELATED -j ACCEPT


This is what I do for protocol 47 which is used by MS VPN connections.

Ray

On Wed, 2003-04-30 at 14:50, Cyrille Colin wrote:
> Hi,
> 
> I would like to know how Netfilter's translator deals with SCTP / IP packets 
> (Stream Control Transmission Protocol, IP protocol 132).
> 
> similarly to UDP, it should be able to translate the source adress in the IP 
> header, and the source port in the SCTP common header, if needed. And 
> recompute SCTP and IP headers checksums.
> 
> is this currently supported ? if not how Netfilter behave when receiving 
> such a packet ??
> 
> any help on this would be very much appreciated... seems that NAT boxes do 
> not like SCTP very much...
> 
> 
> Thanks
> 
> Cyrille
> 
> 
> 
> 
> 
> _________________________________________________________________
> MSN Messenger : discutez en direct avec vos amis ! 
> http://www.msn.fr/msger/default.asp
> 
> 

Attachment: signature.asc
Description: This is a digitally signed message part


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux