The following reply was made to PR bin/30437; it has been noted by GNATS.

From: Matthias Scheler <tron@zhadum.de>
To: NetBSD GNATS <gnats-bugs@netbsd.org>
Cc: "S.P.Zeidler" <spz@serpens.de>
Subject: Re: bin/30437
Date: Wed, 7 Sep 2005 19:13:26 +0100

 	Hello,
 
 I remember that I had a similar problem with NetBSD 3.0_BETA. Could
 you perhaps try building a kernel with "options IPSEC_NAT_T" in
 the configuration? If I remember correctly that fixed the problem
 for me even for IPsec SAs which do *not* use NAT-T.
 
 	Kind regards
 
 -- 
 Matthias Scheler                                  http://scheler.de/~matthias/