Hi, as you can read in the tunnel thread, IPsec is causing lots and lots and lots of problems for me. racoon and some "ip" command dropping dead are rather normal than the exception, for no visible reason it stops from time to time, only to work again with no changes at all a few seconds later and I also had serveral solid lock ups (sorry, no serial console, but I could try netconsole over wlan0,if you think that is a good idea). some of these problems might be related to ipip? at least it is used in my configuration, too, and shows up in the call traces. please let me know, how I cen help finding these problems. here is another example of the problems I encounter: racoon: INFO: isakmp.c:1688:isakmp_post_acquire(): IPsec-SA request for 192.168.1.1 queued due to no phase1 found. racoon: INFO: isakmp.c:797:isakmp_ph1begin_i(): initiate new phase 1 negotiation: 192.168.3.2[500]<=>192.168.1.1[500] racoon: INFO: isakmp.c:802:isakmp_ph1begin_i(): begin Aggressive mode. kernel: bad: scheduling while atomic! kernel: Call Trace: kernel: [schedule+1414/1424] schedule+0x586/0x590 kernel: [xfrm_tmpl_resolve+175/400] xfrm_tmpl_resolve+0xaf/0x190 kernel: [xfrm_lookup+963/1280] xfrm_lookup+0x3c3/0x500 kernel: [default_wake_function+0/32] default_wake_function+0x0/0x20 kernel: [default_wake_function+0/32] default_wake_function+0x0/0x20 kernel: [ip_route_output_key+79/96] ip_route_output_key+0x4f/0x60 kernel: [ipip_tunnel_xmit+467/1664] ipip_tunnel_xmit+0x1d3/0x680 kernel: [ip_confirm+43/48] ip_confirm+0x2b/0x30 kernel: [dev_queue_xmit+210/672] dev_queue_xmit+0xd2/0x2a0 kernel: [ip_finish_output2+224/416] ip_finish_output2+0xe0/0x1a0 kernel: [ip_finish_output2+0/416] ip_finish_output2+0x0/0x1a0 kernel: [nf_hook_slow+243/320] nf_hook_slow+0xf3/0x140 kernel: [ip_finish_output2+0/416] ip_finish_output2+0x0/0x1a0 kernel: [ip_finish_output+501/512] ip_finish_output+0x1f5/0x200 kernel: [ip_finish_output2+0/416] ip_finish_output2+0x0/0x1a0 kernel: [dst_output+20/48] dst_output+0x14/0x30 kernel: [nf_hook_slow+243/320] nf_hook_slow+0xf3/0x140 kernel: [dst_output+0/48] dst_output+0x0/0x30 kernel: [dst_output+0/48] dst_output+0x0/0x30 racoon: ERROR: sockmisc.c:598:sendfromto(): sendmsg (Network is down) racoon: ERROR: isakmp.c:1421:isakmp_send(): sendfromto failed racoon: ERROR: pfkey.c:1625:pk_recvacquire(): failed to begin ipsec sa negotication. kernel: [ip_queue_xmit+1197/1472] ip_queue_xmit+0x4ad/0x5c0 kernel: [dst_output+0/48] dst_output+0x0/0x30 kernel: [xfrm_policy_lookup+108/832] xfrm_policy_lookup+0x6c/0x340 kernel: [ip_route_output_slow+1074/2064] ip_route_output_slow+0x432/0x810 kernel: [flow_cache_lookup+301/448] flow_cache_lookup+0x12d/0x1c0 kernel: [tcp_v4_send_check+88/256] tcp_v4_send_check+0x58/0x100 kernel: [tcp_transmit_skb+1043/1568] tcp_transmit_skb+0x413/0x620 kernel: [tcp_connect+957/1168] tcp_connect+0x3bd/0x490 kernel: [tcp_v4_connect+971/1664] tcp_v4_connect+0x3cb/0x680 kernel: [inet_stream_connect+144/448] inet_stream_connect+0x90/0x1c0 kernel: [sys_connect+155/208] sys_connect+0x9b/0xd0 kernel: [sock_map_fd+273/320] sock_map_fd+0x111/0x140 kernel: [sock_create+408/704] sock_create+0x198/0x2c0 kernel: [sys_socket+61/96] sys_socket+0x3d/0x60 kernel: [sys_socketcall+209/672] sys_socketcall+0xd1/0x2a0 kernel: [do_IRQ+250/304] do_IRQ+0xfa/0x130 kernel: [syscall_call+7/11] syscall_call+0x7/0xb kernel: kernel: Dead loop on virtual device ip4sec0, fix it urgently! Regards, Andreas - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html