In article <[EMAIL PROTECTED]> you write:
>Has anyone tried to pass ipsec traffic through a linux firewall using
>ip-chains?

Not through a linux firewall, but through ciscos.

I'd have thought that you'd need some rules like these:

ipchains -A forward -s addra -d addrb -p 57 -j ACCEPT
ipchains -A forward -d addrb -s addra -p 57 -j ACCEPT

Where the ipsec tunnel is going between addra & addrb. Ipsec
is ip protocol number 57.

        - Regards, Robert.

-- 
Robert Collier                              Smile, it makes people wonder
[EMAIL PROTECTED]                           what you are thinking...

Reply via email to