thanks for the hints, i put back on a config that was working 100% but its not right now. RED works 100% (changed over to that) so it must be something that cripples ssl AND ipsec site2site but not RED. So either Provider or vServer service i guess...