enabled firewall support

testing/tests/ikev2/default-keys/hosts/carol/etc/ipsec.conf

@@ -9,14 +9,15 @@ conn %default
 	keylife=20m
 	rekeymargin=3m
 	keyingtries=1
+	keyexchange=ikev2
 
 conn home
 	left=PH_IP_CAROL
 	leftnexthop=%direct
 	leftcert=selfCert.der
 	leftsendcert=never
+	leftfirewall=yes
 	right=PH_IP_MOON
 	rightsubnet=10.1.0.0/16
 	rightcert=peerCert.der
-	keyexchange=ikev2
 	auto=add

testing/tests/ikev2/default-keys/hosts/moon/etc/ipsec.conf

@@ -9,6 +9,7 @@ conn %default
 	keylife=20m
 	rekeymargin=3m
 	keyingtries=1
+	keyexchange=ikev2
 
 conn carol
 	left=PH_IP_MOON
@@ -16,8 +17,7 @@ conn carol
 	leftcert=selfCert.der
 	leftsendcert=never
 	leftsubnet=10.1.0.0/16
+	leftfirewall=yes
 	right=%any
 	rightcert=peerCert.der
-	keyexchange=ikev2
 	auto=add
-

testing/tests/ikev2/default-keys/posttest.dat

@@ -1,5 +1,9 @@
+moon::iptables -v -n -L
+carol::iptables -v -n -L
 moon::ipsec stop
 carol::ipsec stop
+moon::/etc/init.d/iptables stop 2> /dev/null
+carol::/etc/init.d/iptables stop 2> /dev/null
 carol::rm /etc/ipsec.d/private/*
 carol::rm /etc/ipsec.d/certs/*
 moon::rm /etc/ipsec.d/private/*

testing/tests/ikev2/default-keys/pretest.dat

@@ -1,4 +1,5 @@
-moon::echo 1 > /proc/sys/net/ipv4/ip_forward
+moon::/etc/init.d/iptables start 2> /dev/null
+carol::/etc/init.d/iptables start 2> /dev/null
 carol::rm /etc/ipsec.secrets
 carol::rm /etc/ipsec.d/private/*
 carol::rm /etc/ipsec.d/certs/*