(racoon 874) Re: Racoon behind NAT, SA established, but no Traffic

On Wed, 22 Dec 2004 17:29:43 +0100
[email protected] wrote:

> I have successfully connected with the Windows client,
> and an extract of the network dump is attached.
> I can successfully create an SA with the FW-1,
> but no actual traffic goes through. I enabled
> nat_traversal in racoon.conf without making difference.
> 
> When comparing the Net Dumps I see several differences:
> 1) Under Windows the CP Client is not using ESP packets
> 2) Under Windows the corporate DNS is queried for the mail server
> 3) Under Linux verifying the checksum of some UDP packet fails,
>    marked with => in the dump below. The SA is established nevertheless.

Looks like your Windows client is using SOCKS protocol, right?
I'm not sure whether you can do the similar thing with a Linux box,
but you can give it a try with NAT-T. NAT-T is required as your Linux
box is behind the NAT, UDP-encap is a must, I think.