Re: [suse-security] Why more than 1 hole in FW for IPSec