IPSEC ping

Hello,

I ve a vpn tunnel (native 2.6, openswan)

I have the ipsec tunnel:

host_A [IP_A]<-->[router IP_router]-----------host_B [IP_B] host_C [ip_C]

left IP_A
right IP_B
rightsubnet IP_C

On host A:
ip xfrm policy show

src IP_A/32 dst IP_C/32
dir out priority 2080
tmpl src IP_A dst IP_C
proto esp reqid 16385 mode tunnel

openswans add routing
IP_C via IP_router dev eth1

tested with
iptables -A FORWARD/INPUT -s IP_C -j ACCEPT
iptables -A FORWAD/INPUT -d IP_C -j ACCEPT

and without any rules.

On host A:

ping -I IP_A IP_C give me no repspose...

When I try to use tcpdump I discover strange information

tcpdump -i eth1 -n src or dst IP_C

IP IP_C> IP_A: ICMP echo reply,
IP IP_C > IP_A: ICMP echo reply,
....

I cant see echo request!

but.......

tcpdump -i eth1 -n src or dst IP_B

IP IP_A > IP_B: ESP(spi....
IP IP_B > IP_A: ESP(spi....
IP IP_A > IP_B: ESP(spi....
IP IP_B > IP_A: ESP(spi....
.....

What is wrong?
What ping cannot see ICMP reply?
Why tcpdump do not show me ICMP request?

Thanks for any help

Pawel

----------------------------------------------------------------------
Zostan Chlopakiem Lata! >>> http://link.interia.pl/f1998