From 4817595876203d42235d3d900936dd295a6d5d6d Mon Sep 17 00:00:00 2001
From: Martin Willi <martin@revosec.ch>
Date: Wed, 9 Oct 2013 14:48:50 +0200
Subject: [PATCH] updown: Install forwarding rules with the actually used
 protocol

---
 src/_updown/_updown.in | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/_updown/_updown.in b/src/_updown/_updown.in
index d851b5aed..ca0398ab7 100644
--- a/src/_updown/_updown.in
+++ b/src/_updown/_updown.in
@@ -283,7 +283,7 @@ then
 	IPSEC_POLICY_OUT=""
 else
 	KLIPS=
-	IPSEC_POLICY="-m policy --pol ipsec --proto esp --reqid $PLUTO_REQID"
+	IPSEC_POLICY="-m policy --pol ipsec --proto $PLUTO_PROTO --reqid $PLUTO_REQID"
 	IPSEC_POLICY_IN="$IPSEC_POLICY --dir in"
 	IPSEC_POLICY_OUT="$IPSEC_POLICY --dir out"
 fi