On Fri, 2007-09-28 at 10:08 -0700, Knute Johnson wrote: > Below is the entry for 50 and 51. Do you know what > these are for and do I need them? > > 50 ESP Encap Security Payload [RFC2406] > 51 AH Authentication Header [RFC2402] Well, if you have local access to the box, you can simply try not allowing it, to see if they're really needed. -- [tim@bigblack ~]$ uname -ipr 2.6.22.5-76.fc7 i686 i386 Using FC 4, 5, 6 & 7, plus CentOS 5. Today, it's FC7. Don't send private replies to my address, the mailbox is ignored. I read messages from the public lists.