1*a71a9546SAutomerger Merge Workeriptables-translate -A FORWARD -p esp -j ACCEPT 2*a71a9546SAutomerger Merge Workernft 'add rule ip filter FORWARD ip protocol esp counter accept' 3*a71a9546SAutomerger Merge Worker 4*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT --in-interface wan --protocol esp -j ACCEPT 5*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT iifname "wan" ip protocol esp counter accept' 6*a71a9546SAutomerger Merge Worker 7*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -p 50 -m esp --espspi 500 -j DROP 8*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT esp spi 500 counter drop' 9*a71a9546SAutomerger Merge Worker 10*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -p 50 -m esp --espspi 500:600 -j DROP 11*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT esp spi 500-600 counter drop' 12