Dotaz: IPsec na 2.6.16

[Petr]

Zdravim,
mam nasledujici problem - po upgradu z jadra 2.6.8 na 2.6.16
mne prestaly fungovat ipsec tunely. Konfigurace zustala
stejna, tunely v poradku nabehnou, ale chovaji se "podivne". 
Kdyz zkusim ping, projde tunelem na druhou stranu, vrati se
odpoved, ale ztrati se nekde v jadre..
Diky za pomoc,
 Petr

111.111.111.111 - left ipsec gw, zaroven i left subnet
333.333.333.333 - right subnet
222.222.222.222 - right ipsec gw

111.111.111.111#  ping 333.333.333.333
13 packets transmitted, 0 received, 100% packet loss, time 12013ms

ale dle tcpdump je vse v poradku:
111.111.111.111# tcpdump -i eth1
09:58:50.522141 IP 111.111.111.111 > 222.222.222.222: ESP(spi=0x0edf02aa,seq=0x13)
09:58:50.529161 IP 222.222.222.222 > 111.111.111.111: ESP(spi=0xa70bb230,seq=0x18)
09:58:50.529161 IP 333.333.333.333 > 111.111.111.111: icmp 64: echo reply seq 2
09:58:51.522177 IP 111.111.111.111 > 222.222.222.222: ESP(spi=0x0edf02aa,seq=0x14)
09:58:51.527506 IP 222.222.222.222 > 111.111.111.111: ESP(spi=0xa70bb230,seq=0x19)
09:58:51.527506 IP 333.333.333.333 > 111.111.111.111: icmp 64: echo reply seq 3

Na otázku zatím nikdo bohužel neodpověděl.