Hermann, is your problem still unsolved?
I was just looking for the appropriate RFC's but the answer i found is not quite satisfying. RFC2408 ISAKMP - Page 41 "NOTE: The Delete Payload is not a request for the responder to delete an SA, but an advisory from the initiator to the responder." Not 100% sure, but confirmed by one racoon developer, racoon ignores right now the delete messages. Maybe there is another way to work around your problem for example having a very short lifetime in phase2 (sainfo part of racoon.conf). Stefan -- Stefan Bauer ----------------------------------------- PGP: E80A 50D5 2D46 341C A887 F05D 5C81 5858 DCEF 8C34 -------- plzk.de - Linux - because it works ---------- -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]

