From mboxrd@z Thu Jan  1 00:00:00 1970
From: "Ian Hunter" <ihunter@hunterweb.net>
Subject: Argh!  I'm kicking myself
Date: Fri, 19 Dec 2003 15:42:21 -0500
Sender: netfilter-admin@lists.netfilter.org
Message-ID: <015b01c3c670$99b77600$3dc2a70a@melita.com>
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Return-path: <netfilter-admin@lists.netfilter.org>
Errors-To: netfilter-admin@lists.netfilter.org
List-Help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-Post: <mailto:netfilter@lists.netfilter.org>
List-Subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>,
	<mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-Id: <netfilter.vger.kernel.org>
List-Unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>,
	<mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
List-Archive: <https://lists.netfilter.org/pipermail/netfilter/>
Content-Type: text/plain; charset="us-ascii"
To: netfilter@lists.netfilter.org

For days now I've been trying to figure out how to recompile my Redhat
2.4.20-24.9 kernel to allow masquerading IPSec ESP traffic.  I ran the
much-vaunted "grep -i masq /proc/ksyms" and to my chagrin got nothing back,
but on a lark decided I'd try "iptables -A FORWARD -t nat -i ppp0 -p esp -j
ACCEPT" just to see if it would fly and it did.  Of course.  And now you're
all laughing at me.

Where is this documented, that gre, esp, ah, and the like are acceptable
protocols?  The docs mention icmp, tcp, and udp only.

Is there such a document, or have I discovered a particular cover of the
netfilter doc-hole?

Ian