I've just been informed that there's a reasonably confusing name collision between my ESP and a working name for IPSP. Grumble. I'm easy. ESP is now called ESM (encrypting session manager). Everything else is the same. -matt