Hiroki Sato wrote: It is actually not disabled and ip6fw itself can work with ESP packets. The problem is that the following rule does not work without the patch: Okay, I see. I just committed it. Thanks for the submission. Jeffrey