What I forgot to mention though - is that my firewall rules and
instructions on the Wiki do not currently permit this for security and
zoning reasons.
My understanding from the route table, that I would reach:
- BGPed IPs
- and IPENCAPed subnets on BGPed 44 addresses
over my WAN interface.
I believe the following allow rule would be necessary:
iptables -I FORWARD -s <AMPRLAN> -d 44.0.0.0/8 -o eth0 -j ACCEPT
Those needing to block such access should make a similar rule to DROP.
This still won't allow the BGP subnet to reach the 44 directly without a
tunnel...but henc using the Public IP and going out the WAN...and we've
discussed that in the past.
- Lynwood
PS: someone mentioned they cant reach me on
aol.com, use gmail.