------------------------- rodney:~# iptables -nvL |grep 192.168.6 0 0 ACCEPT all -- eth2:8 * 192.168.6.0/24 192.168.0.0/24 policy match dir in pol ipsec reqid 16601 proto 50 0 0 ACCEPT all -- * eth2:8 192.168.0.0/24 192.168.6.0/24 policy match dir out pol ipsec reqid 16601 proto 50 -------------------------- root@granville:~# iptables -nvL |grep 192.168.0 0 0 ACCEPT all -- eth1 * 192.168.0.0/24 192.168.6.0/24 policy match dir in pol ipsec reqid 16385 proto 50 7607 647K ACCEPT all -- * eth1 192.168.6.0/24 192.168.0.0/24 policy match dir out pol ipsec reqid 16385 proto 50