On Wed, 2003-07-30 at 08:51, Andreas Jellinghaus wrote: > [netfilter] > incoming encrypted packets are seen as ESP/AH in INPUT > and then as decrypted packet in INPUT or FORWARD. Just to clarify, the packets will travel INPUT *twice* (once as ESP and then in the clear)?