From owner-freebsd-net  Fri Sep 14 21:43: 0 2001
Delivered-To: freebsd-net@freebsd.org
Received: from cody.jharris.com (cody.jharris.com [205.238.128.83])
	by hub.freebsd.org (Postfix) with ESMTP id 4857937B403
	for <freebsd-net@FreeBSD.ORG>; Fri, 14 Sep 2001 21:42:56 -0700 (PDT)
Received: from localhost (nick@localhost)
	by cody.jharris.com (8.11.1/8.9.3) with ESMTP id f8F4gtl47468;
	Fri, 14 Sep 2001 23:42:55 -0500 (CDT)
	(envelope-from nick@rogness.net)
Date: Fri, 14 Sep 2001 23:42:55 -0500 (CDT)
From: Nick Rogness <nick@rogness.net>
X-Sender: nick@cody.jharris.com
To: x x <ipver4@hotmail.com>
Cc: freebsd-net@FreeBSD.ORG
Subject: Re: NAT and IPSEC
In-Reply-To: <F195IcioFpFJeadCIgr0000f545@hotmail.com>
Message-ID: <Pine.BSF.4.21.0109142342200.46842-100000@cody.jharris.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-net.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-net>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-net>
X-Loop: FreeBSD.org

On Fri, 14 Sep 2001, x x wrote:

> Is it possible to use a signale FreeBSD box to serve as a NAT and IPSEC 
> gateway? I can get either to work, but not both. Thanks.

	Yes.  Don't send the IPSEC packets through nat.  Use gif tunnels
	instead.


Nick Rogness <nick@rogness.net>
 - Keep on Routing in a Free World...
  "FreeBSD: The Power to Serve!"


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message