---
name: "ipsec__updown_espmark"
section: "8"
platform: "linux"
package: "strongswan"
version: "2.8.0+dfsg-1+etch2"
release: "Debian 4.0 (Etch)"
platforms: ["linux"]
url: "https://new.carta.tech/ipsec__updown_espmark"
---

# ipsec\_\_updown\_espmark(8)

manages routes and firewall rules

## NAME

ipsec \_updown\_espmark - manages routes and firewall rules

## SYNOPSIS

*\_updown\_espmark* is invoked by pluto when it has brought up a new connection. This script is used to insert the appropriate routing and iptables firewall entries for IPsec operation. The incoming ESP traffic must be marked by a static rule in the mangle table. The default value for the mark is 50. The interface to the script is documented in the pluto man page.

## SEE ALSO

[ipsec(8)](/ipsec/8.md), [ipsec\_pluto(8)](/ipsec_pluto/8.md).

## HISTORY

Man page written for the Linux strongSwan project \<http://www.strongswan.org/\> by Andreas Steffen. Original program written by Henry Spencer.