i have setup the following configuration

[pc1]--[linux1/firewall/nat]--[internet]--[linux2/firewall/nat]--[pc2]

installed linux 7.3 on both firewall's
installed frees/wan 2.0 on both firewall's

the tunnel is working perfect, i can ping pc2 from pc1 and backward.

but now the main problem:

when i start the ipsec service (service ipsec start) on the linux box1, then it's impossible to ping a internet host from pc1, but it is possible to visit a site with IE (pc1) and also a ping from the linux1 box to the internet works perfect.

don't know what's wrong.

hope you can help me.

thnx,

i have to put in firewall

input ipsec+ ACCEPT
output ipsec+ ACCEPT
prerouting ipsec+ ACCEPT
forward ipsec+ ACCEPT

did you had the same problem???

no i havent. But you have to verify if ipsec is not through NAT.