Allow traffic without destination port

[CAMPLA]

Currently it is not possible to allow traffic (in the net_whitelist / net_whitelist_INPUT) for a target ip address without providing a destination port. In case of ESP traffic there is no destination port and the whitelist entry is ignored.

Example:
iptables -A whitelist_OUTPUT -d --proto esp -j ACCEPT