macro.ipsec

sharewall is very good

#
# Shorewall version 4 - IPsec Macro
#
# /usr/share/shorewall/macro.IPsec
#
#	This macro (bidirectional) handles IPsec traffic
#
###############################################################################
#ACTION	SOURCE	DEST	PROTO	DEST	SOURCE	RATE	USER/
#				PORT(S)	PORT(S)	LIMIT	GROUP
PARAM	-	-	udp	500	500	# IKE
PARAM	-	-	50			# ESP
PARAM	DEST	SOURCE	udp	500	500	# IKE
PARAM	DEST	SOURCE	50			# ESP
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE