only allowing authenticated/encrypted connections through

[md5@ghettohackers.net]

hello obsdr's,

i have a wireless gateway that i would like to only allow authenticated IPSec 
connections to gain access to the internet.

i tried writing the ipf rules as:

# phase 1 of of ISAKMPD
pass in log quick on wi0 proto tcp/udp from 10.10.1.0/24 to wi0/32 port = 500 
keep state

# phase 2
pass in log quick on wi0 proto esp from 10.10.1.0/24 to any

# phase 3
pass in log quick on enc0 proto tcp/udp from 10.10.1.0/24 to any
pass out log quick on enc0 proto tcp/udp from any to 10.10.1.0/24

thx for any pointers!,

-5