It seems NAT-T does not work properly. See my previous postings.

And it seems there is fix ready (if these topics are related) that is not 
released yet
(see topic "1.3b2 - IP fragments not passed" in group 
"gmane.comp.security.firewalls.m0n0wall.devel")

regards,
Marek


"Andreas Ferrari" <aferrari at stasoft dot ch> wrote in message 
news:46F8BD50 dot 7060707 at stasoft dot ch...
> Have youenabled NAT-T (see attached image)?
> regards
> Andreas