On Fri, 31 Dec 2004 10:37:46 +0100, Dario Rigolin <drigolin at iol dot it> wrote:
> I have packets dropped and I didn't create a rule for that.
> The configuration of my m0n0 is 4 ethernet interfaces: LAN (fxp0), WAN (fxp1),
> OPT1 (fxp2), OPT2 (fxp3).
> On OPT2 (10.23.208.1/26) I have a tunnel to a PIX (10.23.205.65) but the @19
> rule drop all incoming packets to OPT2 and the m0n0 cannot complete the
> authentication phase with the PIX. Firewall log shows UDP packets dropped
> coming from 10.23.205.65 and directed to 10.28.208.1
> Checking into status.php page I have a dump of all rules...
> 

Is the VPN connection up?  Check Diagnostics -> IPsec, and see if
there are any SAD entries.

-Chris