Page 1 of 1

Allowing specific IP protocols by name or number

Posted: 05 Sep 2008, 18:43
by Root
Hello,

Please add the ability to define specific protocols to be accepted, such as Generic Route Encapsulation or gre (47) for VPN tunnels.

The following are examples of the iptables rules required in the aforementioned configurations:

Code: Select all

-A INPUT -p gre -j ACCEPT
-A OUTPUT -p gre -j ACCEPT

or

-A INPUT -p 47 -j ACCEPT
-A OUTPUT -p 47 -j ACCEPT
Preferably, each entry would be at the beginning of the "ACCEPT" section its respective chain (i.e., INPUT or OUTPUT).

I appreciate your consideration of this feature request. Thank you! :)

Posted: 09 Sep 2008, 16:01
by chirpy
You can already do that using the csfpre.sh and csfpost.sh functionality.