>Additionally, after removing all my SAs (on the PF_KEY machine) >with 'ipsecadm -delspi' I cannot remove the flows that where using >these SAs: > As an FYI, if you have IPsec routing table entries you want to delete, you can use "route flush -encap" -Angelos