openswan configures kernel with policies SPD in order to pass packets through the tunnel. with spdflush I guess you delete all these rules. openswan at minimum configures 3 SPD policies. in out fwd