[Openswan Users] Help with WinXP behind NAT as client

[SianLun Lau]

On Mon, 29 Mar 2004 09:49:24 +0200
"Leonard Tulipan" <l.tulipan at mpwi.at> wrote:

> # IKE negotiations
> iptables -A INPUT  -p udp --sport 500 --dport 500 -j ACCEPT
> iptables -A OUTPUT -p udp --sport 500 --dport 500 -j ACCEPT

perhaps you need to allow 4500 too for NAT-T?

regards,
SianLun