Re: IPsec anyone

[rrc@vigen.pilot.net (Robert Collier)]

In article <[🔎] 378E8AF2.C7E00C9E@x-factor.net> you write:
>Has anyone tried to pass ipsec traffic through a linux firewall using
>ip-chains?

Not through a linux firewall, but through ciscos.

I'd have thought that you'd need some rules like these:

ipchains -A forward -s addra -d addrb -p 57 -j ACCEPT
ipchains -A forward -d addrb -s addra -p 57 -j ACCEPT

Where the ipsec tunnel is going between addra & addrb. Ipsec
is ip protocol number 57.

	- Regards, Robert.

-- 
Robert Collier				    Smile, it makes people wonder
rob@ossifrage.net			    what you are thinking...