[strongSwan] Leftover "block" policy after IPSec connection is terminated

[Tobias Brunner]

Hi Andreas,

> I don't know if this is intended

It is not.  The drop policies should have been removed together with the
CHILD_SA.

> How can I achieve this?

Not sure what causes it exactly, but upgrading should work (those drop
policies were removed with 5.6.2).

Regards,
Tobias