>> i made a change to ipsec logic, so that ipsec and ipf interact better. >Any chance that those changes will make it in the release branch? >Bye, i'll try, but the amount of mbuf manipulation change bothers me. (if i make mistake we'll have mbuf leak on release branch) itojun