Re: IPIP Tunnel

Jérôme Warnier
Thu, 30 Dec 2004 15:44:17 -0000

Le jeudi 30 décembre 2004 à 12:11 +0100, Jérôme Warnier a écrit
:
> Hi guys,
>
> I''m trying to setup an IPIP tunnel between a Cisco router and a
firewall
> running Debian GNU/Linux Sarge with Shorewall 2.0.13.
> I''ve read and implemented the http://shorewall.net/IPIP.htm
document,
> but I don''t understand why there should be at the same time a
"tunnel"
> and a "tunnels" script.
> Shorewall still refuses to let the "PROTOCOL=4" packets to go
through
> even if I create both.
>
> I also read http://shorewall.net/GenericTunnels.html and tried the part
> to allow "PROTOCOL=4", but it doesn''t work either.
>
> What am I missing?

Well, I found the last problem I had, due to a wrong documentation in
the file "tunnels":

#       The columns are:
#
#       TYPE        --  must start in column 1 and be "ipsec",
"ipsecnat","ip"
#                       "gre", "6to4",
"pptpclient", "pptpserver",
"openvpn" or
#                       "generic"

The "ip" there on the same line as "TYPE" should read
"ipip", not "ip".

> Thanks