[nos-bbs] iptables and jnos question

[jerome schatten]

Hi...

I have been trying to construct a firewall rule to filter on the 44 
address of an ipip encapsulated packet rather than the 'carrier 
address'. I've tried all sorts of variations of:

iptables -A FORWARD -i tun0 -s 44.x.x.x -j DROP

at the beginning of the forward chain with no success. I'm beginning to 
get the feeling that it is may not possible to filter on the 
encapsulated ip.

Thanks for any suggestions,
jerome - ve7ass