Just a FYI, When I fired up OpenSWAN cvs last week, with the stock ipsec.conf, the box was completely unreachable via IP until I physically arrived (hours later) and ran /etc/init.d/ipsec stop.