[Openswan Users] KLIPS and iptables policy match

[Paul Wouters]

On Wed, 30 Mar 2011, John A. Sullivan III wrote:

> Hello, all.  Does the iptables policy match, e.g., "-m policy --strict
> --dir in --pol ipsec --proto esp --mode tunnel," match esp packets using
> KLIPS or just netkey?

AFAIK, it should because it is matching packet content. It will be slightly
different because of the different path of the packet via multiple interfaces
(eth0 vs eth0+ipsec0)

Paul