I was interested in seeing how the new(ish) dpdaction=restart option differed from clear and hold. Looking through the ipsec.conf man and other docs they don't appear to have been updated yet. How does restart differ from hold? And in what situations would I use restart instead of the other options. Sorry if this sounds a bit obvious. Thanks, Duncan