Paul Wouters wrote:
Might be an option, but I used to set it off by default because it broke stuff in earlier freeswan releases (where I applied the NAT-T patch). Is it "safe" now, i.e. is _everything_ expected to work with NAT-T being on that work when it is disabled ?You forgot: nat_traversal=yes ? Perhaps Rene wants to enable this per default.
best regards, Rene