Olivier Alabeatrix <oalabeatrix@xxxxxxxxx> wrote: > The postrouting chain secpath rule never matches: > ip saddr 172.16.11.0/24 ip daddr 172.16.12.0/24 meta secpath exists > counter accept > > What may I be doing wrong? Any help is welcomed. Outgoing packets do not have a secpath, you will need to use 'rt ipsec exists'.
