Hi I got IPSEC and NAT on one linux box. For gateway to gateway tunnels with static ip addresses this is no problem. A no-NAT iptables postrouting rule (-j ACCEPT) for the tunnels will do. But how can this be done in a road warrior config with changing ip addresses? Any ideas? thanks philipp