Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     esp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    2  1296 ACCEPT     udp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           udp dpt:500 
    4  1144 ACCEPT     udp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           udp dpt:4500 
    0     0 ACCEPT     tcp  --  eth0   *       192.168.0.150        0.0.0.0/0           tcp spt:80 
  317 47861 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    1    84 ACCEPT     all  --  eth0   *       10.1.0.20            10.2.0.0/16         policy match dir in pol ipsec reqid 2 proto 50 
    1    84 ACCEPT     all  --  *      eth0    10.2.0.0/16          10.1.0.20           policy match dir out pol ipsec reqid 2 proto 50 
    1    84 ACCEPT     all  --  eth0   *       10.1.0.10            10.2.0.0/16         policy match dir in pol ipsec reqid 1 proto 50 
    1    84 ACCEPT     all  --  *      eth0    10.2.0.0/16          10.1.0.10           policy match dir out pol ipsec reqid 1 proto 50 

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     esp  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
    2   920 ACCEPT     udp  --  *      eth0    0.0.0.0/0            0.0.0.0/0           udp spt:500 
    4   952 ACCEPT     udp  --  *      eth0    0.0.0.0/0            0.0.0.0/0           udp spt:4500 
    0     0 ACCEPT     tcp  --  *      eth0    0.0.0.0/0            192.168.0.150       tcp dpt:80 
  315 64919 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp spt:22