#: Accept packets from remote ipsec networks on ipsec interfaces
if [ -n "$IPSECCONN" ]; then
    for i in $IPSECCONN; do
	eval "IPSEC_IF=\$IPSEC_IF_$i"
	eval "IPSEC_HERE=\$IPSEC_HERE_$i"
	eval "IPSEC_THERE=\$IPSEC_THERE_$i"
    	case $MASQMETHOD in
    	ipfwadm)
            $IPFWADM -I -a accept -W ${IPSEC_IF%%:*} -S $IPSEC_HERE
            $IPFWADM -I -a accept -W ${IPSEC_IF%%:*} -S $IPSEC_THERE
    	    ;;
    	ipchains)
	    $IPCHAINS -A input -j ACCEPT -i ${IPSEC_IF%%:*} -s $IPSEC_HERE
	    $IPCHAINS -A input -j ACCEPT -i ${IPSEC_IF%%:*} -s $IPSEC_THERE
    	    ;;
	netfilter)
	    $IPTABLES -A INPUT -j ACCEPT -i ${IPSEC_IF%%:*} -s $IPSEC_HERE
	    $IPTABLES -A INPUT -j ACCEPT -i ${IPSEC_IF%%:*} -s $IPSEC_THERE
	    ;;
    	esac
    done
fi