Last summer's -current had a setkey that would take a line like this in the ipsec.conf: add a.a.a.a b.b.b.b tcp 0x1000 -A tcp-md5 "foobar" ; Recent builds don't like it. Is this a pr'able issue or does someone know of a modern syntax for to reach the same goal? Thanks, peter