Brian,
I seeded both IPs...and you said they were in my last Encap.
Send me your SRC IP off thread, you and I can browse my netflow.
I'm not blocking
The would have come through old amprgw root@router:~# ip route get 44.0.0.1 from 44.60.44.1 44.0.0.1 from 44.60.44.1 via 169.228.66.251 dev tunl0 table 44 cache window 840
root@router:~# ip route get 44.128.0.1 from 44.60.44.1 44.128.0.1 from 44.60.44.1 via 169.228.34.84 dev tunl0 table 44 cache window 84
root@router:~# ipset test ipipfilter 169.228.34.84 169.228.34.84 is in set ipipfilter
root@router:~# ipset test ipipfilter 169.228.66.251 169.228.66.251 is in set ipipfilter
It's still in my firewall.
No "inbound path". tunl0 is open and connection tracking is off.
- KB3VWG