In article <[EMAIL PROTECTED]> you write:
>Has anyone tried to pass ipsec traffic through a linux firewall using
>ip-chains?
Not through a linux firewall, but through ciscos.
I'd have thought that you'd need some rules like these:
ipchains -A forward -s addra -d addrb -p 57 -j ACCEPT
ipchains -A forward -d addrb -s addra -p 57 -j ACCEPT
Where the ipsec tunnel is going between addra & addrb. Ipsec
is ip protocol number 57.
- Regards, Robert.
--
Robert Collier Smile, it makes people wonder
[EMAIL PROTECTED] what you are thinking...