[strongSwan] Help needed with shunted connections - not working as expected

[Mahendra SP]

Hi All,

I am trying to use strongswan 5.3.5 to drop/allow a set of ports. Please
find attached the ipsec.conf file. As per this file, I expect that telnet
connection to 192.168.1.8 should get dropped. But it appears that the
default allow rule gets applied every time.

Is there any problem with the options I have provided? Am I missing
something here ?

Please let me know.

Thanks
Mahendra
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20160216/0711d55d/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ipsec.conf
Type: application/octet-stream
Size: 452 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20160216/0711d55d/attachment.obj>