Benedikt Gollatz a écrit :
On Thu, 9 Jul 2009 15:06:52 +0200, David Balažic <xerces9@xxxxxxxxx>
wrote:
iptables -A input_wan --proto 41 -s 3.4.5.6 -j ACCEPT
Doing this in the filter tables is too late.
Why ?
You need to accept proto-41
packets in the PREROUTING chain to stop the connection tracker from looking
at them.
Wrong. Connection tracking happens anyway.
Anyway what David need is to allow 6in4 traffic from the tunnel
endpoint. This has nothing to do with connection tracking.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
