yap, i have try different ways, like port forward the udp 500 to the 
monowall, i works, and also i have set a rule of pass udp 500  in order 
to get it work !But someone here said the monowall can auto gen a rule 
for the connection but not in my case, i want to know why too !
Banny

sylikc wrote:

>Banny,
>
>I'm having trouble with IPSec VPN through NAT.  Is that what you are
>doing?  What client did you use to connect.  You mentioned about
>opening port 500, is that
>UDP 500 IN
>?  I've been stuck for a long time dating back to the original thread
>giving me P1 timeout errors when trying to do IPSec VPN through a NAT
>using agressive mode to my m0n0.
>
>Thanks,
>
>/sylikc
>
>
>
>On Fri, 24 Sep 2004 11:59:47 +0800, Banny Chu <banny at hktnc dot com> wrote:
>  
>
>>I finally get the vpn on, i don't know why, i have to add a rule for
>>port 500 to pass in in order to get the vpn work, but now i face another
>>problem, what if i setup in a dynamic IP location, which is one location
>>have fix ip and the other location not, could monowall handle this task
>>? Thx so much !
>>Banny
>>    
>>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
>For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
>
>
>  
>