On Fri, 10 Mar 2017, Viktor Keremedchiev wrote: > I have pretty stock routing, there is a simple SNAT and not much else. Are you excluding SNAT for IPsec packets? https://libreswan.org/wiki/FAQ#NAT_.2B_IPsec_is_not_working Paul