From ecfb1579c401a4e0d80ed6ea9a328e056681311a Mon Sep 17 00:00:00 2001
From: lub <git@lubiland.de>
Date: Sat, 21 Dec 2019 21:17:29 +0100
Subject: [PATCH] allow incoming esp traffic

---
 config/etc/nftables.conf | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/config/etc/nftables.conf b/config/etc/nftables.conf
index 4d40ea4..b71d218 100644
--- a/config/etc/nftables.conf
+++ b/config/etc/nftables.conf
@@ -36,6 +36,9 @@ table ip filter {
 
         # overlay network traffic
         udp dport 4789 accept
+        
+        # allow IPSEC connections (encrypted overlay networks)
+        ip protocol esp accept
     }
     chain FORWARD {
         type filter hook forward priority 0;