Hello List,<br><br> I have a tunnel receiving traffic but not routing/forwarding it. The tunnel has a Linksys BEFSX41 at the distant end sitting right on the internet. There is no NAT involved. The OpenSWAN server sits directly on the internet as well. There is an XP host behind the linksys and behind the server.<br>
<br>TCPDUMP shows the ESP packet arrive on the OpenSWAN server's external interface. The next line shows the unencrypted UDP 137 from the host behind the linksys destined for a host on my server's internally connected network.<br>
<br>XP Host ----- Linksys --- internet --- OpenSWAN --- XP Host.<br><br>rp_filter is off forwarding is on.<br><br>Been searching the archives and reading and everything. Can't figure out why the OpenSWAN box won't route. ip xfrm policy looks correct. I have much experience setting up netfilter with iptables. Where could I look? Any other tools besides tcpdump and netfilter logging?<br>
<br>Thanks for any help.<br><br>Jeff<br>