>>>>> "Klaus" == Klaus Klein <kleink@mibh.de> writes:

    Klaus> In a nutshell, it was dealing with the absence of NAT-PT
    Klaus> support from the kernel rather ungracefully. This is fixed
    Klaus> now on the trunk.

    >> Thanks for the info! I'm recompiling at the moment...

    >> Is the absent kernel UDP_ENCAP_ESPINUDP* support something 'on
    >> its way' into netbsd?

    Klaus> It's already there as a kernel option; see IPSEC_NAT_T in
    Klaus> options(4).

Oops, so near... ;-)

Aynway: As in the mentime announced by Emmanuel Dreyfus
<manu@netbsd.org> all my reported problems are solved now with recent
racoon update.

Thanks for all the help and the fast response!

Markus.