Hi In src/sys/netinet6/ipsec.c:key_get_reqlevel(), at the IPPROTO_AH case, a break is missing, causing level to be always IPSEC_LEVEL_USE. This seems a bug to me, but as I don't really understand what that code does, I'd like someone who knows about this code to tell me if the break should be added or not. -- Emmanuel Dreyfus manu@netbsd.org