TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
> Are you sure you mean IKE, as in Internet Key Exchange? IKE is used as part > of IPSec, which involves a number of protocols to negotiate and establish a > secure connection. IKE itself is based in part on ISAKMP, which uses TCP/UDP > port 500. If your IPSec implementation is using a PKI as part of its > authentication, you may also see TCP port 389 (LDAP). Depending on the type > of security negotiated, IPSec itself will use either Encapsulating Security > Payload (ESP), TCP port 50, or Authentication Header (AH), TCP port 51. Steve - these are NOT TCP ports, but IP protocol numbers (that you can find in IP header, indicating what's next in the transport header of the packet), like TCP, UDP and ICMP have their own unique numbers... Michal > > http://www.ietf.org/rfc/rfc2409.txt > > Steve > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > Tyson Garrett > Sent: Tuesday, October 23, 2001 12:21 AM > To: Mitchell, Brian (ISS Atlanta) > Cc: [EMAIL PROTECTED] > Subject: Re: How to filter out protocols other than ICMP/TCP/UDP? > > > > TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to > [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any > problems! > -------------------------------------------------------------------------- -- > > What I'd like to be able to do is create a filter rule to ignore some > protocols other than TCP/ICMP/UDP (eg. IKE) from a point to point > perspective, eg ignore all IKE to my VPN termination point but alert me > when there is IKE somewhere else.... > > Cheers > Tyson > >
