From owner-freebsd-questions@FreeBSD.ORG Wed May 4 17:00:11 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2E23116A4CE for ; Wed, 4 May 2005 17:00:11 +0000 (GMT) Received: from rproxy.gmail.com (rproxy.gmail.com [64.233.170.194]) by mx1.FreeBSD.org (Postfix) with ESMTP id E547143D7E for ; Wed, 4 May 2005 17:00:06 +0000 (GMT) (envelope-from calvin.lane@gmail.com) Received: by rproxy.gmail.com with SMTP id a41so199900rng for ; Wed, 04 May 2005 09:59:31 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type; b=EaCs8Yw/g3nDZZ3mJ1s9jOzDX0qnSZqwFE70vqEh/Gd8aK+aQFfkTbVYCSHNr9LnELWMPJTqBp0KxZ/P4H8tTwGxnNONn1szkkGlAY5GPMB0EYef/sdLKeb8YVajKtV74LpdunXkEYaI/wFZg7UokGDbm9VpqND8BrZFcjNnDck= Received: by 10.38.6.75 with SMTP id 75mr1342035rnf; Wed, 04 May 2005 09:59:31 -0700 (PDT) Received: by 10.38.76.22 with HTTP; Wed, 4 May 2005 09:59:31 -0700 (PDT) Message-ID: <995be75e05050409591da23458@mail.gmail.com> Date: Wed, 4 May 2005 09:59:31 -0700 From: Calvin Lane To: freebsd-questions@freebsd.org Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.1 Subject: Allowing GRE in IPFILTER X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Calvin Lane List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 May 2005 17:00:11 -0000 Hello everyone, I've recently installed and configured mpd. I've been able to establish VPN= =20 connections with no problem internally on my network. When I attempt to=20 establish a connection through my firewall, I get a number of error=20 messages. The problem is that I'm not allowing GRE to get through on my=20 firewall. Here is currently what I have: pass in quick on xl0 proto gre from any to 192.168.10.253/24 pass out quick on xl0 proto gre from 192.168.10.253/24to any Please let me know what the correct syntax is for allowing gre traffic=20 through through an ipfilter firewall running BSD 4.10. Thanks. Calvin calvin.lane@gmail.com