Nobody has any idea? I have started to investigate without success (tap device) but I don't understand why openvpn server is seen form lan1 (when netbsd acts as a router) and not from netbsd server itself... JB