Translations:IPsec L2TP VPN server/180/en

Firewalld only blocks incoming connection, not outgoing, and even "rich" rules are not expressive enough to state what is needed for inbound. However, firewalld is designed to live with with nftables tables, so the nftables solution above will work and not interfere with it.