> A tcpdump on my external interface (ppp0) only shows my echo-requests > and no packets whatsoever coming from the tunnelbroker PoP. I would at > least expect to see some or other packet, e.g. an icmp error message, > coming from the tunnelbroker PoP. iptables doesn't prevent packets from showing up in tcpdump. So you will always see everything you receive on the wire in tcpdump, independent of any iptables configuration. this is because tcpdump hooks into PF_PACKET, which is at layer2, before the ipstack (and thus iptables) is consulted at all. -- - Harald Welte <laforge@xxxxxxxxxxxxx> http://www.netfilter.org/ ============================================================================ "Fragmentation is like classful addressing -- an interesting early architectural error that shows how much experimentation was going on while IP was being designed." -- Paul Vixie
Attachment:
pgp00576.pgp
Description: PGP signature
