1 :INPUT,FORWARD 2 -m policy --dir in --pol ipsec;=;OK 3 -m policy --dir in --pol ipsec --strict;;FAIL 4 -m policy --dir in --pol ipsec --strict --reqid 1 --spi 0x1 --proto esp --mode tunnel --tunnel-dst 10.0.0.0/8 --tunnel-src 10.0.0.0/8 --next --reqid 2;=;OK 5 -m policy --dir in --pol ipsec --strict --reqid 1 --spi 0x1 --proto esp --tunnel-dst 10.0.0.0/8;;FAIL 6