I am machines on IPsec VPN which is a subnet of my bigger LAN ( ie I have machines on the LAN which is not in the VPN ), specifically :- 192.168.132.0/29:0 -> internet ---> 192.168.1.192/27:0 ( local subnet ---> internet--> remote subnet ) # ip route list ... 192.168.1.192/27 via 21x.18x.11x.8x dev ipsec0 192.168.1.0/24 via 192.168.15.146 dev eth0 ... Now, the machines in the local subnet ***INSIDE*** 192.168.132.0/29 when accessing remote subnet 192.168.1.192/27 are routed to the internet using VPN and this is behaving correctly. But machines in the local subnet ***OUTSIDE*** of 192.168.132.0/29, when accessing remote subnet 192.168.1.192/27 is also routed to the ipsec0 via 21x.18x.11x.8x ( as shown by the route list above ), instead of 192.168.15.146 ( which is an alternative route for machines outside of the VPN ). How do I accomplish this ? _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/