$ if [ -f /proc/net/ipsec_version ] > then > echo "okay" > fi okay
The problem is probably this: one manually loads af_key, so netkey is used. One restarts openswan, which in its 'stop' scripts rmmod af_key. On start, it will first try to use ipsec, and if that fails to load will use af_key. therefor, when using af_key, one needs to probe it in the startup script. workaround: don't unload any modules ever permanent fix: we have added a stack= option that will appear in a few weeks in openswan 2.5.0 Paul -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]