[strongSwan] firewall configuration on Linux for IKE and dpd?

[Harald Dunkel]

Hi folks,

I wonder if it is reasonable to use connection tracking for
500/udp and 4500/udp in the iptables configuration, esp.
wrt dead peer detection?


Your thoughts on this?

Regards
Harri