Diana

> Are connection attempts to port 500 from the outside world keeping your
> connection live?


That's the one.  Seems like the ipsec_set_policy might sort it out ?
I'd like to cut the connection when data is not being transferred 
across the net if I can.

Thanks



-- 
Richard