1:INPUT,FORWARD 2-m policy --dir in --pol ipsec;=;OK 3-m policy --dir in --pol ipsec --proto ipcomp;=;OK 4-m policy --dir in --pol ipsec --strict;;FAIL 5-m policy --dir in --pol ipsec --strict --reqid 1 --spi 0x1 --proto ipcomp;=;OK 6