[nos-bbs] iptables and jnos question

[jerome schatten]

Thanks Maiko...

Yes, I could do it easily with tcp access in jnos, but after my 
complaining on the 44 list about unwanted packets showing up at the tun0 
interface, and receiving a drubbing for wasting bandwidth as it was 
possible to filter out any annoyance, I decided to learn iptables.

It has been an interesting journey, and I was hoping to be able to do 
all my packet filtering in one place, in linux.  I did a fairly 
extensive search and like you, came up empty.  The man page for iptables 
(over 1000 lines) seems mute on this.

I'm still curious to know if it's possible, and if so, how.
j.


On 2015-07-24 09:38, Maiko Langelaar wrote:
>
> Why not just do it in JNOS with the ip access rules ? Since it
> is the man encapsulator/decapsulator for the 44 network traffic.
>
>> the feeling that it is may not possible to filter on the encapsulated 
>> ip.
>
> I don't know, I've never tried, a quick search came up empty.
>
> M
>
>