Subject: Re: IPsec and NAT?
To: Markus A. Boeing <email@example.com>
From: Urban Boquist <firstname.lastname@example.org>
Date: 06/08/2001 16:18:20
>>>>> Markus A Boeing writes:
Thanks, that was a good read!
Markus> As a rule of thumb NAT should occur before the box performs
Markus> IPsec encapsulation.
You mean "before" on outbound packets, right? And after on inbound. So
that would be the way NetBSD used to behave, but no longer does...