Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 12 Feb 1998 16:33:43 -0600 (CST)
From:      Alex Nash <nash@Mcs.Net>
To:        "Eric J. Schwertfeger" <ejs@bfd.com>
Cc:        "Matthew N. Dodd" <winter@jurai.net>, jra@colltech.com, freebsd-hackers@FreeBSD.ORG
Subject:   Re: IP tunnels ? once again probably 
Message-ID:  <Pine.BSF.3.95.980212162818.28905G-100000@Jupiter.Mcs.Net>
In-Reply-To: <Pine.BSF.3.96.980212110511.28143C-100000@harlie.bfd.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 12 Feb 1998, Eric J. Schwertfeger wrote:

> It almost did for me too, but doesn't seem to work on any kernal compiled
> with firewalling. Has anyone else seen this behavior, or have I just
> tweeked the poor thing all by myself?

SKIP uses IP protocol 57 (and IIRC, a couple of UDP ports for key
exchange), perhaps your firewall configuration is blocking these?  Try
adding a deny rule which logs all packets just before the final deny rule:

  ipfw add 65534 deny log ip from any to any

Alex


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe hackers" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.95.980212162818.28905G-100000>