Hey Daniel,
Thanks for the info, that's helped to clear things up. I think I've got a reasonable shot at making this work. Will look into the
idea of assigning a secondary address to the VPN link and setting it as the preferred source IP. That makes sense and is probably
cleaner than setting up a source nat, I just didn't know that the VPN software could do that. Darn clever these linux guys.
Also searched and found some more info on openVpn vs IPSEC and yes agree entirely, openVPN uses a different protocol and is the
wrong tool.
Thanks again
Pete
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html