OS 2.6.32, Linux 2.6.32.27, KLIPS. When using KLIPS, please check to see if /proc/net/ipsec/eroute/all is world readable. If not, should it be? I think this has been on-again/off-again in recent few releases. Either that or I lost the bit of script that sets it readable. N