Brian,
I seeded both IPs...and you said they were in my last Encap.
Send me your SRC IP off thread, you and I can browse my netflow.
I'm not blocking
The would have
come through old amprgw
root@router:~# ip route get 44.0.0.1 from 44.60.44.1
44.0.0.1 from 44.60.44.1 via 169.228.66.251 dev tunl0 table 44
cache window 840
root@router:~# ip route get 44.128.0.1 from 44.60.44.1
44.128.0.1 from 44.60.44.1 via 169.228.34.84 dev tunl0 table 44
cache window 84
root@router:~# ipset test ipipfilter 169.228.34.84
169.228.34.84 is in set ipipfilter
root@router:~# ipset test ipipfilter 169.228.66.251
169.228.66.251 is in set ipipfilter
It's still in my firewall.
No "inbound path". tunl0 is open and connection tracking is off.
- KB3VWG