[strongSwan] is it stongswan or local firewall ?

[lejeczek]

hi everybody

I have, I'd like to think a regular setup: a client => a 
server(rightsourceip=10.5.10.220,10.5.10.221) and local net 
10.5.10.0/24

client can ping server and others on 10.5.10.0/24
client can ssh to server and vice versa
but
client cannot sshd to nodes behind server on 10.5.10.0/24

if I tcpdump 22 it's quiet, nmap says it's filtered.
What should I be looking at?

many thanks, L.