Hasan, I can confirm that xtables_options_xfrm() works. Just suspicious of that call, "xfrm" seems too specific to xfrm subsystem but generic enough. Dont bother resending the patch, it works right now, I am just waiting for confirmation from Pablo/Jan and i will proceed from there. I am also still struggling with whether to add your intermediate solution to rename the xt->ipt. I think i will go ahead and add a kernel change. cheers, jamal -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html