- ### Restore conmark and continue with next filter
- tc filter add dev $qossettings{'RED_DEV'} parent ffff: prio 1 protocol all u32 \\
- match u32 0 0 \\
- action connmark continue
- ### Send all traffic except IPSec to $qossettings{'IMQ_DEV'}
+ ### Pass IPSec traffic without redirect
+ tc filter add dev $qossettings{'RED_DEV'} parent ffff: prio 1 protocol all basic \\
+ match "ipt(-m policy --pol ipsec --dir in)" \\
+ action pass
+
+ ### Restore connmark and send rest of the traffic to $qossettings{'IMQ_DEV'}