I thought maybe I had identified a bug, but my bugzilla post about patchomatic installation problems was grouped into an IPsec functional bug. https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=328 I'm looking for a solution to patch the kernel successfully. I read posts about people getting this working, but can't figure out what I'm doing wrong. Here is what I get when I try Patch-o-matic . . . . Welcome to Patch-o-matic ($Revision: 3733 $)! Kernel: 2.6.11, /usr/src/linux-2.6.11.8 Iptables: 1.3.1, /usr/src/iptables Each patch is a new feature: many have minimal impact, some do not. Almost every one has bugs, so don't apply what you don't need! ------------------------------------------------------- Already applied: CLASSIFY SAME addrtype comment hashlimit realm sctp NETMAP iprange Testing ipsec-01-output-hooks... not applied The ipsec-01-output-hooks patch: Author: Patrick McHardy <kaber@xxxxxxxxx> Status: Testing, should be fine [NETFILTER+IPSEC 1/4] This patch adds new output hooks for IPsec. Packets traverse the hooks like this: 1. -> (plain) FORWARD -> POST_ROUTING -> (encrypted) LOCAL_OUT -> POST_ROUTING 2. -> (plain) LOCAL_OUT -> POST_ROUTING -> (encrypted) LOCAL_OUT -> POST_ROUTING ----------------------------------------------------------------- Do you want to apply this patch [N/y/t/f/a/r/b/w/q/?] y ipsec-01-output-hooks has dependency on nf_reset, but nf_reset is not known ipsec-01-output-hooks has dependency on nf_reset, but nf_reset is not known -----------------------------------------------------------------