Herbert Xu has been very actively developing the 2.6 native IPsec stack. A lot of IPsec fixes went into 2.6.8. For details see: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.8 It fixes the netlink hangs, and various nat-traversal udp encapsulation problems. Thanks Herbert! Paul