IPsec clues?

[dsr-mzpnVDyJpH4k7aNtvndDlA at public.gmane.org (Dan Ritter)]

Does anyone know a good document on how 2.6 IPsec fits in with
netfilter? LART/C and Rusty's Unreliable don't seem to say
anything useful.

(In specific, I have a gateway which is doing NAT, firewalling,
and now an IPsec tunnel. I've got the SA up and I can ping the
far side and get replies, but TCP doesn't seem to transit.)

-dsr-

-- 
.. .----. --   .-. . .- -.. .. -. --.   -.-- --- ..- .-.   -- .- .. .-.. .-.-.-   .-- .... ---   . .-.. ... .   .. ... ..--.. 
http://tao.merseine.nu/~dsr/eula.html is hereby incorporated by reference.

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.