[suse-security] Re: IPTables and GRE Packets

[Stefan Andreas Tichy <listuser@xxxxxxxxx>]

On Mon, Dec 01, 2003 at 05:15:21PM +0100, Peer Stefan wrote:
> Shouldn't that read
>  iptables -A INPUT -i eth0 -p 47 -j ACCEPT
>  iptables -A FORWARD -i eth0 -o eth1 -p 47 -j ACCEPT
>  iptables -A OUTPUT -o eth1 -p 47 -j ACCEPT

No, just use the FORWARD chain.
For ascii art fans: packet-filtering-HOWTO-6.html


> And what about replies?

Good question.


-- 
Stefan Tichy <listuser@xxxxxxxxx>

-- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here