Oops, hit send too quick... to continue my sentence: For notes on my native ipsec setup issues, see my forthcoming posts on the netfilter mailing list (a google search should pick them up after a couple of days). PS: HTB works great with native ipsec without kernel panics! _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/