danny at dannysplace.net writes: > Ummm.. I do it... I would have to check my config, but I think it's AH esp. Okay, so how does this work? When NAT munges the TCP header, how do you manage to confirm the ESP header?