Re: IP Protocol 57
On Mon, Jul 23, 2001 at 09:59:09AM -0400, Chad Thompson wrote:
> Hmmm... Both firewalls (the one on my side and the one at the
> VPN host site) , use IPCHAINS. It seems that I can allow the
> protocol 57 traffic through my firewall on the client side,
> but when I try below on the VPN host side:
>
> ipmasqadm portfw -a -P 57 -L $IPADDR -R 10.2.0.2
>
> I get a 'portfw: invalid protocol specified' ..... Is there a
That's because "ipmasqadm portfw" is for forwarding TCP or UDP
packets to internal machines, not SKIP (proto 57) packets.
I don't even know if SKIP has ports.
> different way to do this? Please don't tell me I need to
> upgrade kernels to 2.4.x now.... :)
Well, DNAT on 2.4.x might work, but it depends on how SKIP
works. (I don't know how SKIP works, so DNAT may or may not
work for it.)
It looks to me like you might have to bite the bullet ;)
--
Michael Wood | Tel: +27 21 762 0276 | http://www.kingsley.co.za/
wood@kingsley.co.za | Fax: +27 21 761 9930 | Kingsley Technologies
Reply to: