From: "pheusion@snet.net" <pheusion@snet.net>
To: Ian Hunter <ihunter@hunterweb.net>
Cc: netfilter@lists.netfilter.org
Subject: Re: Argh! I'm kicking myself
Date: Fri, 19 Dec 2003 16:33:06 -0500 [thread overview]
Message-ID: <1071869586.3634.4.camel@GenMicroSys> (raw)
In-Reply-To: <015b01c3c670$99b77600$3dc2a70a@melita.com>
Not sure I follow..
AH(51) ESP(50) are IPsec traffic, as long as you have that module you
should be all set (FreeSwan)
On Fri, 2003-12-19 at 15:42, Ian Hunter wrote:
> For days now I've been trying to figure out how to recompile my Redhat
> 2.4.20-24.9 kernel to allow masquerading IPSec ESP traffic. I ran the
> much-vaunted "grep -i masq /proc/ksyms" and to my chagrin got nothing back,
> but on a lark decided I'd try "iptables -A FORWARD -t nat -i ppp0 -p esp -j
> ACCEPT" just to see if it would fly and it did. Of course. And now you're
> all laughing at me.
>
> Where is this documented, that gre, esp, ah, and the like are acceptable
> protocols? The docs mention icmp, tcp, and udp only.
>
> Is there such a document, or have I discovered a particular cover of the
> netfilter doc-hole?
>
> Ian
>
>
next prev parent reply other threads:[~2003-12-19 21:33 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-12-19 20:42 Argh! I'm kicking myself Ian Hunter
2003-12-19 20:59 ` Aldo S. Lagana
2003-12-19 21:33 ` pheusion [this message]
2003-12-19 21:39 ` pheusion
2003-12-19 22:06 ` Ramin Dousti
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1071869586.3634.4.camel@GenMicroSys \
--to=pheusion@snet.net \
--cc=ihunter@hunterweb.net \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox