I think something in the recent IPSEC changes is setting the ipsec_used flag to be always true. This means that non-IPSEC traffic is sent through the IPSEC code. Robert Swindells