Thus said "Patrick W. Gilmore" on Mon, 28 May 2001 01:24:58 EDT:

The VPN solutions I have used (e.g. Bay Networks, MS PPTP) send *every* packet from the end user machine to the VPN end-point, not just selected packets (like with SSH tunneling).

This should be configureable, if it isn't then maybe it's time for a switch in protocols/software. :-)

So, does anyone know of a VPN that does selective forwarding like SSH tunneling?

FreeS/Wan does this by default. Only traffic defined by the tunnel security association is encrypted, the rest goes through untouched. Very optimal. :-) I don't believe this is specific to FreeS/Wan either, as most IPSEC implementations I have seen do something similar. (including hardware solutions). Andy [-----------[system uptime]--------------------------------------------] 3:43pm up 19 days, 18:20, 6 users, load average: 1.00, 1.01, 1.00