An IPsec transport-mode connection between the hosts moon and sun is successfully set up. leftfirewall=yes automatically inserts iptables-based firewall rules that let pass the decrypted IP packets. In order to test the host-to-host connection moon pings sun.