From owner-freebsd-pf@FreeBSD.ORG  Mon May 23 05:23:18 2011
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id C40951065673
	for <freebsd-pf@freebsd.org>; Mon, 23 May 2011 05:23:18 +0000 (UTC)
	(envelope-from freebsd-pf@herveybayaustralia.com.au)
Received: from mail.unitedinsong.com.au (mail.unitedinsong.com.au
	[150.101.178.33])
	by mx1.freebsd.org (Postfix) with ESMTP id 76D888FC0C
	for <freebsd-pf@freebsd.org>; Mon, 23 May 2011 05:23:18 +0000 (UTC)
Received: from laptop1.herveybayaustralia.com.au
	(laptop1.herveybayaustralia.com.au [192.168.0.186])
	by mail.unitedinsong.com.au (Postfix) with ESMTP id AD10A5C22
	for <freebsd-pf@freebsd.org>; Mon, 23 May 2011 15:31:46 +1000 (EST)
Message-ID: <4DD9EF87.6070104@herveybayaustralia.com.au>
Date: Mon, 23 May 2011 15:24:23 +1000
From: Da Rock <freebsd-pf@herveybayaustralia.com.au>
User-Agent: Mozilla/5.0 (X11; U; FreeBSD amd64; en-US;
	rv:1.9.1.16) Gecko/20110204 Thunderbird/3.0.11 ThunderBrowse/3.3.4
MIME-Version: 1.0
To: freebsd-pf@freebsd.org
References: <4DD8E815.4090209@herveybayaustralia.com.au>
	<20110522122229.GD36033@relay.ibs.dn.ua>
In-Reply-To: <20110522122229.GD36033@relay.ibs.dn.ua>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: pf firewall nat and IPSec
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 23 May 2011 05:23:18 -0000

On 05/22/11 22:22, Zeus V Panchenko wrote:
> i was not able to figure it out too ...
> ipsec esteblishes connection, android receives ip address, even can
> ping for a short time and after that it breaks
>
> no idea what's wrong ...
>
>    
Ok. So I've tried wifi hotspots and the mobile network- all no go. 
Racoon's obviously not the problem or L2TP; its definitely PF.

What do I need to do to find the problem definitively and resolve it?

Has anyone tried with other firewalls? If not I can maybe try IPFW or 
another.