From f00a8dd320ed52677d3c45044cf03eaf63818567 Mon Sep 17 00:00:00 2001
From: Nicolas Fort <nicolasfort1988@gmail.com>
Date: Tue, 23 Jan 2024 18:43:34 +0000
Subject: T5977: firewall: remove ipsec options in output chain rule
 definitions, since it's not supported.

(cherry picked from commit 9d490ecf616eb9d019beee37a3802705c4109d9d)
---
 interface-definitions/include/firewall/ipv4-hook-forward.xml.i | 1 +
 1 file changed, 1 insertion(+)

(limited to 'interface-definitions/include/firewall/ipv4-hook-forward.xml.i')

diff --git a/interface-definitions/include/firewall/ipv4-hook-forward.xml.i b/interface-definitions/include/firewall/ipv4-hook-forward.xml.i
index de2c70482..b0e240a03 100644
--- a/interface-definitions/include/firewall/ipv4-hook-forward.xml.i
+++ b/interface-definitions/include/firewall/ipv4-hook-forward.xml.i
@@ -28,6 +28,7 @@
             #include <include/firewall/action-forward.xml.i>
             #include <include/firewall/common-rule-ipv4.xml.i>
             #include <include/firewall/inbound-interface.xml.i>
+            #include <include/firewall/match-ipsec.xml.i>
             #include <include/firewall/offload-target.xml.i>
             #include <include/firewall/outbound-interface.xml.i>
           </children>
-- 
cgit v1.2.3