The NZ Linux Resource

[wailug] w2000 vpn

Nic Bellamy nic at bellamy.co.nz
Tue Jul 15 10:00:50 NZST 2003


On Tue, 2003-07-15 at 08:31, Tony Arcus wrote:
> 08:23:13.939802 202.89.41.34 > 202.27.208.8: gre 202.89.41.34 > 202.27.208.8: 
> [KS] gre-proto-0x880B (DF) [tos 0x80]  (ttl 56, id 24858, len 65)

Server sends you a GRE packet...

> 08:23:13.940001 202.27.208.8 > 202.89.41.34: icmp: 202.27.208.8 protocol 47 
> unreachable [tos 0xc0]  (ttl 255, id 57926, len 93)

Your firewall responds with a "can't handle that here" message.

I'd double-check firewalling first, but you may need to move your
firewall to a 2.4 kernel, as it has better support for protocols such as
GRE.

Nic.

-- 
Nic Bellamy <nic at bellamy.co.nz>
Bellamy Consulting (NZ) Limited. +64-6-377-4957 Mobile: +64-21-251-8954
Internet Software & Security Consulting -- http://www.bellamy.co.nz/ --

--------------------------------------------------------------------
To remove yourself from this list, email wailug-request at linux.net.nz
with "unsubscribe" in the body of the message.



More information about the WaiLUG mailing list If you have any questions or comments about this page, email the Webmaster
Design Copyright © 1998-2005 Linux.net.nz