RE: ipsec and iptables

[Sneppe Filip]

Title: RE: ipsec and iptables

Hi Charles,

iptables ... -p 50 ... -j ACCEPT

should work, but you may run into problems if you're using NAT
and IPsec AH...

Regards,
Filip


-----Original Message-----
From:   Charles Stack [mailto:[EMAIL PROTECTED]]
Sent:   ma 25/02/2002 21:50
To:     [EMAIL PROTECTED]
Cc:    
Subject:        ipsec and iptables
We're trying to connect a ipsec client to an ipsec server through an
iptables-based firewall.
It seems that the firewall is blocking protocol 50 traffic.

Is it possible to get this traffic to pass through cleanly?
If so, how?

I'm guessing right now that I'm going to have to provide a routable static
ip to the workstation thus giving that machine raw internet access.  Ugh.

Thanks,

Charles