On Thu, 8 Jul 2004, H. Peter Anvin wrote: > I know there is work underway to deal with the netfilter issue, but > the routing/address selection issue also seems like a problem. How > should this be dealt with? If I understood your routing problem correction you or the IKE implementation you are using simply need to adjust the IPSec routes to carry the correct source IP assignment information. See "ip route". Regards Henrik - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html