According to ipsec.conf(5), mark-in and mark-out override mark.
Why allow mark and mark-* at the same time? That seems like an mistake and would be better diagnosed. _______________________________________________ Swan-dev mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan-dev
