Eileen Kelleher said:
> I have encountered a serious problem, at least for me.  The firewall
> does not seem to be able to pass any IPSEC traffic from the LAN segment
> to the WAN connection.  Does anyone have a clue what I could do to
> enable this?
>
> I lowered the MTU to ensure encapsulation wouldn't be the problem, this
> fixed it for a NetScreen firewall when I encountered the same symptoms
> before.
>
> I am using a safenet client on a windows XP system to connect out to a
> remote netscreen endpoint.  It gets a connection but cannot pass any
> traffic.

I have a SafeNet SoftRemote client running on a Win XP notebook behind my
m0n0wall at home, too. It connects to a ZyWALL and works flawlessly. You
may have to allow fragments in your default LAN -> any rule, though.

HTH,

Manuel