Linux Netfilter discussions
 help / color / mirror / Atom feed
* GRE filter.
@ 2004-03-20 17:48 Alexey Kurnosov
  0 siblings, 0 replies; only message in thread
From: Alexey Kurnosov @ 2004-03-20 17:48 UTC (permalink / raw)
  To: netfilter


Sorry for my English.

I have Linux as VPN terminator (pptpd). Some computers in LAN should not 
have access to the server (Over GRE). So I just put:

iptables -I INPUT -s 192.168.1.1 -j DROP

And nothing.

I put:
iptables -I PREROUTING -s 192.168.1.1 -p 47 -j LOG
iptables -I PREROUTING -s 192,.168.1.1 -j LOG

and there are no messages from kernel when tunnel is up.

What wrong? Why some IP-level packets travel behind my filter?

--
Best regards.
Alex Kurnosov.




^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2004-03-20 17:48 UTC | newest]

Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-03-20 17:48 GRE filter Alexey Kurnosov

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox