[ULTRAMONKEY-USERS] RealServer IPTABLE setup help

[awysocki at absoftware.com]

I have my system all up and running.  I'm tring to turn on Linux Firewall 
( IPTABLE ) on my realserver but am lost as to what to us when using a 
TUNL0 setup

If I access my web server by its RIP address It works fine but when I go 
though the VIP address I get the following from tcpdump

12:43:07.786903 IP xx.xx.xx.17 > yy.yy.yy.194: IP zz.zz.zz.68.28538 > 
xx.xx.xx.218.http: S 1722808321:1722808321(0) win 8192 <mss 
1452,nop,wscale 2,nop,nop,sackOK> (ipip-proto-4)
12:43:07.786920 IP yy.yy.yy.194 > xx.xx.xx.17: icmp 80: host xx.xx.xx.194 
unreachable - admin prohibited


I'm using tunneling 

VIP address is  xx.xx.xx.218
PIP address is  xx.xx.xx.17
RIP address is  yy.yy.yy.194
CIP address is  zz.zz.zz.68