Hi, I think that you can't see any outgoing traffic because there is no spd rule that matches any outgoing traffic ( from site A, ie you freebsd box) : this just comes from your second spd rule where "in" should be "out" :
Try to replace the second rule: spdadd 192.168.0.0/24 192.168.1.64/32 any -P in ipsec esp/tunnel/217.150.138.138-217.150.130.163/unique; By : spdadd 192.168.0.0/24 192.168.1.64/32 any -P out ipsec esp/tunnel/217.150.138.138-217.150.130.163/unique; Hope this helps. :-) Regards, -- SOLANKI Jigar --- _______________________________________________ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"