iptables, ipsec, and host2host

[Joe Pruett <joey@xxxxxxxxxxxx>]

i have been scouring the net and i can't find any clues to whether i can 
do filtering after ipsec has decrypted a packet on a host2host connection. 
net2net goes through the filters a second time, but host2host doesn't seem 
to do that.  is there some other method i can use to filter the traffic 
after being decrypted?
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html