From 2e8d2c5bf2601ca5468036dc61a8b3c69b960eb3 Mon Sep 17 00:00:00 2001
From: Bill Nottingham <notting@redhat.com>
Date: Fri, 18 Feb 2005 21:54:34 +0000
Subject: more ipsec stuff (#147001, <ckjohnson@gwi.net>)

---
 sysconfig/network-scripts/ifdown-ipsec | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/sysconfig/network-scripts/ifdown-ipsec b/sysconfig/network-scripts/ifdown-ipsec
index cbc8e2df..37785642 100755
--- a/sysconfig/network-scripts/ifdown-ipsec
+++ b/sysconfig/network-scripts/ifdown-ipsec
@@ -57,6 +57,7 @@ if [ "$MODE" = "host" ]; then
 	setkey -c << EOF
 	spddelete $SRC $DST any -P out;
 	spddelete $DST $SRC any -P in;
+	spddelete $DST $SRC any -P fwd;
 EOF
 else
       [ -z "$SRCNET" ] && SRCNET="$SRC/32"
@@ -67,6 +68,7 @@ else
       /sbin/setkey -c >/dev/null 2>&1 << EOF
 	spddelete $SRCNET $DSTNET any -P out;
 	spddelete $DSTNET $SRCNET any -P in;
+	spddelete $DSTNET $SRCNET any -P fwd;
 EOF
 fi
 
-- 
cgit v1.2.1