I am testing m0n0wall on a standard PC (CF/IDE version)
with LAN, WAN and one optional interface.
When I am setting up an IpSec tunnel, the source subnet in caroon.conf always choose my LAN subnet.
I have been pleased if the possibility to select witch interface (subnet) I want to set up as source
could be implemented in future versions.