Greetings. NetBSD 1.6 ships with /sbin/setkey. setkey only makes sense if IP forwarding is on. However, the sysctl setting net.inet.ip.forwarding defaults to 0. Either this should default to 1, or setkey should test for net.inet.ip.forwarding being 1 and report if it is set incorrectly. --Paul Hoffman