27 Dec
2014
27 Dec
'14
7:13 a.m.
On 27-12-14 14:09, Marc, LX1DUC wrote:
Well the issue lies with
/usr/sbin/iptables -A INPUT -p ipip -j ACCEPT
"-p ipip" does NOT do what you think it does.
It allows protocol 94.
What you actually want to do is:
/usr/sbin/iptables -A INPUT -p ipencap -j ACCEPT
or to be safe use:
/usr/sbin/iptables -A INPUT -p 4 -j ACCEPT
Thanks marc, this is a valuable lesson. It has cost me hours and hours
trying to figure it out.