The #define you are looking for is in: /usr/src/linux/include/net/ip_forward.h in my 2.0.25 source tree. I sugjest that you upgrate to the current 2.0.XX kernel (I have used 2..0.28 with the ipsec-0.4 distrabution). ||ugh Daniel Linux FreeSWAN Project hugh at toad.com