On Fri, 2004-10-29 at 15:49, netfilter@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx wrote: > I have a linux box (redhat 9.0) that I want to use for NAT and VPN tunnel. > The netfilter setup is very simple, just this line: > iptables -t nat -A POSTROUTING -s 192.168.167.0/24 -o eth1 -j > SNAT --to my_external_ip > > Everyting works fine and the linux box does nat for internal subnet. But > when I start ipsec (freeswan) (service ipsec start) nat stops forwarding > packets. > > Any tips? there's a problem with your ipsec.conf. -j -- "What's the point of going out, we're just going to end up back here anyway?" --The Simpsons