ipmasq/rules/I50ipsec.rul



#: Accept packets from remote ipsec networks on ipsec interfaces
if [ -n "$IPSECCONN" ]; then
    for i in $IPSECCONN; do
    eval "IPSEC_IF=\$IPSEC_IF_$i"
    eval "IPSEC_HERE=\$IPSEC_HERE_$i"
    eval "IPSEC_THERE=\$IPSEC_THERE_$i"
        case $MASQMETHOD in
        ipfwadm)
            $IPFWADM -I -a accept -W ${IPSEC_IF%%:*} -S $IPSEC_HERE
            $IPFWADM -I -a accept -W ${IPSEC_IF%%:*} -S $IPSEC_THERE
            ;;
        ipchains)
        $IPCHAINS -A input -j ACCEPT -i ${IPSEC_IF%%:*} -s $IPSEC_HERE
        $IPCHAINS -A input -j ACCEPT -i ${IPSEC_IF%%:*} -s $IPSEC_THERE
            ;;
    netfilter)
        $IPTABLES -A INPUT -j ACCEPT -i ${IPSEC_IF%%:*} -s $IPSEC_HERE
        $IPTABLES -A INPUT -j ACCEPT -i ${IPSEC_IF%%:*} -s $IPSEC_THERE
        ;;
        esac
    done
fi