noob question: ipsec and outgoing nat

[ruggerio]

Hi,

i have a working ipsec connection, which i would like that my clients at home use also for surfing. On any client, i installed the route 0.0.0/0, which i assume will redirect all traffic via tunnel.

The thing is, that i cannot go to internet like this. On the firewallside, i see dns-requests leaving the firewall, but no response comes back. So i assume, that the connection is not natted, so it goes to 192.168.0.0/24 (which is quite wrong).

Also, on outgoing nat, i see just rules for lan networks and localhost. There should also be a rule for ipsec? How can i do that? I did not find any rtfm :(

TIA
Roger