[Openswan Users] Iptables problem (netkey)

Ruben Laban r.laban at ism.nl
Wed Jan 9 10:28:23 EST 2008

On Wednesday 09 January 2008, Nicole Hähnel wrote:
> I only see:
> kernel: -- DENY IN=dsl0 OUT= MAC=xxxx SRC=xxx DST=xxx LEN=72 TOS=0x00
> PREC=0x00 TTL=57 ID=55683 PROTO=4
> Do I have to add a rule to allow PROTO 4?

Proto 4 is IPinIP which has nothing to do with IPsec as far as I know. So 
either there's (also) another VPN solution in place and/or your IPsec 
connection is working (or at least being used) at all.


Ruben Laban
Systems and Network Administrator
r.laban at ism.nl
ISM eCompany
Van Nelleweg 1
Postbus 13043
3004 HA Rotterdam
+31 (0)10 243 6000 (tel)
+31 (0)10 243 6066 (fax)

Quality Solutions - Reliable Partner

More information about the Users mailing list