(usagi-users 02517) Firewall as with ipsec0 interface

[Michal Ludvig <michal-list@xxxxxxxx>]

Hi all,
AFAIK the implementation of IPsec stack in recent linux-2.6.0-test comes 
from your effort so I'm sending my question here...

With kernel 2.4.x and FreeS/WAN I was used to have firewall rules like

# Allow IPsec and IKE
iptables -I INPUT -i eth0 -p esp -j ACCEPT
iptables -I INPUT -i eth0 -p ah -j ACCEPT
iptables -I INPUT -i eth0 -p udp --sport 500 --dport 500 -j ACCEPT

# Allow only SSH from IPsec client 192.168.1.1
iptables -I INPUT -i ipsec0 -p tcp -s 192.168.1.1 --dport 22 -j ACCEPT
iptables -I INPUT -i ipsec0 -s 192.168.1.1 -j REJECT

Now that ipsec0 interface is a history ... how do I set a similar 
firewall rule?

Thanks in advance!

Michal Ludvig