ipsec_prestart()
{
if [ `sysctl -n net.inet.ip.fastforwarding` = 1 ]; then
warn "ipsec is not compatible with fastforwarding"
stop_boot
return 1
fi
if [ ! -f "$ipsec_file" ]; then
warn "$ipsec_file not readable; ipsec start aborted."