IPSec through NAT?

["Nicholas Lee" <nj.lee@kiwa.co.nz>]

I have a location with a Nokia M10 ADSL modem.  Unforunately the powers that
be at the moment have set it up as the holder of the public IP with it doing
the firewalling and NAT.

The M10 allows pinholing (RDR) but currently only UDP, TCP, GRE  and ICMP
protocols.


I was wondering is there is some clever way to get IPSec from an internal
openbsd box behing the ADSL modem to my other openbsd gateway machine?

Or is my only option something like a hacl ppp over ssh?  (or if possible
ipsec over ppp?)

Nicholas