>>>>> Markus A Boeing writes:

Markus> http://www.cisco.com/warp/public/759/ipj_3-4/ipj_3-4_nat.html

Thanks, that was a good read!

Markus> As a rule of thumb NAT should occur before the box performs
Markus> IPsec encapsulation.

You mean "before" on outbound packets, right? And after on inbound. So
that would be the way NetBSD used to behave, but no longer does...

Thanks,

        -- Urban