Comment by LawnGnome

I don't know, but the problem with blocking esp4 and esp6 is that IPsec stops working, as I understand it.