indicates that the gateway is doing firewalling and that pluto should poke holes in the firewall as required. See doc/firewall.html in the source.