[Openswan Users] UDP: Bad checksum

[Jacco de Leeuw]

Lars Bakker wrote:

> No, I cannot confirm that those problems do not occur when the ipsec 
> server is directly connected to the Internet

I.e. only client side NAT?

> but I used a similar configuration on the host system without NAT 
> device which worked > trouble-free.

I.e. no client side or server side NAT at all?

> If it is a problem related to the mtu value, what do I have to change to 
> make it working?

Check out the overridemtu= parameter.

Also be sure to check the settings of your NAT device(s) and try disabling
the broken IPsec passthrough that is incompatible with NAT-T.

Jacco
-- 
Jacco de Leeuw                         mailto:jacco2 at dds.nl
Zaandam, The Netherlands           http://www.jacco2.dds.nl
                     Mosquitos suck