>> 1) Is there alternative for 'leftfirewall=yes' in the VICI interface to >> automatically setup iptables rules? > > There is no option for the default updown script, but you may manually > specify "ipsec _updown" in the CHILD_SA "updown" configuration option.
Actually, the command equivalent to `leftfirewall=yes` is `ipsec _updown iptables`. Regards, Tobias _______________________________________________ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users
