Chain INPUT (policy ACCEPT 573 packets, 154K bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  eth0   *       10.1.0.0/16          192.168.0.100       policy match dir in pol ipsec reqid 1 proto 50 
    6   648 DROP       all  --  eth0   *       192.168.0.1          0.0.0.0/0           

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 557 packets, 107K bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      eth0    192.168.0.100        10.1.0.0/16         policy match dir out pol ipsec reqid 1 proto 50