On Fri, 17 Feb 2006, Tuomo Soini wrote: > Of course they will be set because _updown script doesn't know if netkey > or klips is used. Ah that should be changed. openswan-2.5 will have an option to set the stack in ipsec.conf and we want to call a _updown.stack to seperate them. But this will not happen in openswan 2.4.x Paul