On Wed, Jan 28, 2009 at 1:17 PM, Matt Stevens <matt at elevate.org> wrote: > Well, the fact that I'm terminating the tunnel helps. :-) > > Basically, I want to apply an output filter on the tunnel interface to > filter packets leaving the tunnel towards a local subnet. > -- > matt What type of service set are you using? -- Stefan