Brian, On 06/27, Gix, Brian wrote: > I don't think this is correct. *relayed* packets must preserve the > originators IV_Index... Correct. I realized my mistake and quoted the appropriate section of the spec - there is a message about it on the list. The other patch stands, though - as it happens, our network is in the middle of IV Update at the moment and I've been getting failures about decrypting application payloads. cheers -- Michał Lowas-Rzechonek <michal.lowas-rzechonek@xxxxxxxxxxx> Silvair http://silvair.com Jasnogórska 44, 31-358 Krakow, POLAND