Shorewall users - May 2005 - IPSec NAT-T woes

Hello,


I am using shorewall 2.2.3-1 and ipsec-tools-0.5.2 on the same machine.
My kernel 2.6.11.10 is patched as needed.
The server has an official IP-Adress (no NAT on this side), but some of 
the clients do use NAT.

I figured out that NAT-T connections (RFC 3947) did not work without the 
"generic:udp:4500" in /etc/shorewall/tunnels:

# Road-Warriors
ipsecnat                net     0.0.0.0/0       road
generic:udp:4500        net     0.0.0.0/0       road


regards
claas

Please discard my previous mail, as it is nonsense.
I was tricked by my system. I thought I was already
NAT''ed, but in fact I wasn''t. Racoon caused my
problems.

claas