> This is not supported. Look at ipsec.conf(5): Marc,
That's not quite the point I was making. The point I was making is that '-n -f" should tell me its not supported (or a config error or whatever). I shouldn't have to wait for the nasty surprise awaiting me when I go "-f" after "-n -f" declares no errors !