IPTABLES and IPSEC

You need to allow ESP, AH and ISAKMP/IKE traffic. That means you need to allow IP protocols number 50 (ESP) and 51 (AH). These are the protocols not the ports. Just as UDP is protocol 17 and TCP is protocol 6. You will also have to open up UDP port 500 for the ISAKMP/IKE traffic. The commands would be something like this:

${IPTABLES} -t filter -A INETIN -p ah -j ACCEPT
${IPTABLES} -t filter -A INETIN -p esp -j ACCEPT

You may have to adjust them for your system. Also add the UDP / port 500 rule.

These links may be helpful:

http://master-www.linuxrouter.org:8080/listarch/linux-router/2001-03-01/threads.html

http://slashdot.org/articles/01/01/22/1338244.shtml

http://www.ultraviolet.org/mail-archives/snort-users.2001/author.html(REMOVE SPACES from the pasted URL.)

Maxwell

This question was closed by the author