Hi, just FYI: man ipsec, in teh BUGS section, says: " The IPcomp protocol support is currently broken." so, this is a well known problem and on someone's TODO list, which is probably way too long. Feel free to prived a patch to fix the problem.