I think you probably want this part ("Using this support, only firewall1 requires /etc/shorewall/netmap").
https://shorewall.org/netmap.html#idm140072814490512 I think it should be /32. I doubt I can help more than that; it's been years since I used this, and never combined it with ipsec. -- Justin _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users