Hello! I've encountered a misprint in Handbook, chapter 14.10.4 "Configuring IPsec on FreeBSD", http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ipsec.html In the "ipfw add 00204 allow log usp from any 500 to any" it should be "udp", not "usp". -- WBR, Igor I. Ushatinsky <igor at tngf.ru> Russia, Tyumen.