Re: Filtering encrypted vs. unencrypted packages?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hadmut Danisch schrieb:
Hi,

I was just playing around with 2.6 IPSec and isakmpd and ran into a problem:

In order to have the packets from the peer IPSEC network accepted,
I need to have an entry like

iptables -A INPUT -s 192.168.19.0/24 -j ACCEPT

Try using the the protocol option:

iptables -A INPUT -s 192.168.19.0/24 -p 50 -j ACCEPT
iptables -A INPUT -s 192.168.19.0/24 -p 51 -j ACCEPT

where 50 are esp packets und 51 ah if I understood it right.



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux