> I'm an idiot but here's the answer for posterity. Remote site hosts
> all use a different default GW than the m0n0 itself. When I added a
> static route on a host on the remote pointing to it's m0n0 as the GW
> for my net, pings went across fine. Coupla static routes and I'm home
Yes, we always think of traffic being blocked by firewall rules whereas
it's often simply a routing issue...
If you don't want to add a static route on each host, try to set the
static route only on their default gateway and icmp-redirect (if well
implemented) should do the job for you.