IPIP tunnel and filter rules

Honestly, though, it might be a lot easier to just use SSTP instead of IPSEC+IPIP