Jason Opperisano wrote:
just for my own edification--i installed that rule base on my wireless laptop, which runs a VPN tunnel for all its traffic (but normally does not use connection tracking), and it does work--so i don't think this is a "bug" per se.
Jason, it works with 2.6.3! Give me some time for some investigations...
It works with all kernels up to 2.6.8, but the patch "patch-2.6.9-rc1" breaks iptables/ipsec (at least for me).
-- Greetings Bjoern Schmidt