updown: Install forwarding rules with the actually used protocol

diff --git a/src/_updown/_updown.in b/src/_updown/_updown.in
index d851b5aed68e7abee7fa7838737beeae94ddd69f..ca0398ab7aa57c290a1a9b648ec0c26fa716774a 100644 (file)
--- a/src/_updown/_updown.in
+++ b/src/_updown/_updown.in
@@ -283,7 +283,7 @@ then
        IPSEC_POLICY_OUT=""
 else
        KLIPS=
-       IPSEC_POLICY="-m policy --pol ipsec --proto esp --reqid $PLUTO_REQID"
+       IPSEC_POLICY="-m policy --pol ipsec --proto $PLUTO_PROTO --reqid $PLUTO_REQID"
        IPSEC_POLICY_IN="$IPSEC_POLICY --dir in"
        IPSEC_POLICY_OUT="$IPSEC_POLICY --dir out"
 fi