I have a linux box (redhat 9.0) that I want to use for NAT and VPN tunnel. The netfilter setup is very simple, just this line: iptables -t nat -A POSTROUTING -s 192.168.167.0/24 -o eth1 -j SNAT --to my_external_ip Everyting works fine and the linux box does nat for internal subnet. But when I start ipsec (freeswan) (service ipsec start) nat stops forwarding packets. Any tips?