Hi, > rightid="DNS:vpn.remote.fqdn" > rightid=%any Obviously not the same as configuring `id="DNS:remote.fqdn"`. Also, setting `mode="pass"` is probably not what you want. Regards, Tobias