i am currently strugeling a litte bit.
To get gre working through ipsec i need to add a rule to allow gre from the same source where the ipsec establishes.
So if i understand that right that gre would be open as port from this source?
If i disable those rule gre won't work any more.
So what is the right way to do this?