Hello I'm trying to secure my wireless network using ipsec. I have the client and the router (both running a recent snapshot) communicating using esp fine as indicated by tcpdump when I ping the router from the client. However the problem I'd like to solve is when I access the internet the traffic flows unencrypted (i'd like the traffic between the client and router encrypted and decrypted on the router and passed to the internet, and any responses encrypted when they hit the router and passed back to the client for decryption). Is this possible using ipsec.conf/ipsecctl? I've tried a few things but it always seems the encrypted traffic tries to traverse the router still encrypted. I was amazed how easy it was to get the client and router talking via ipsec and this is the first stumbling block i've encountered. Any help would be really appreciated. Thanks Barry
ipsec.conf: flow esp from 192.168.1.200 to 0.0.0.0/0 peer 192.168.1.1 ike esp from 192.168.1.200 to 192.168.1.1