[Openswan Users] kernel upgrade - ping problem

[pzlist]

Hi,

after upgrading from 2.4.32 to 2.6.17  my ipsec doesn't work longer

When I try to ping remote host -  I cannot see response (ipsec 
connection is established)

my tcpdump is able to see icmp reply from remote host - (but not icmp 
request!)

trace on my router inform me the that ESP packets lease my network  and 
responses (ESP) return to me

my kernel settings:
rp_filter = 0
ip_forward = 1
send_redirects = 0
accept_redirects = 0

what is wrong?

Maybe someone can help me please....


Pawel