At 03:51 PM 1/18/2006, Bob . wrote:

>I am interested in running a small network from Country A to Country B 
>using IPsec with monowall's on each end.  So far no problem, standard 
>setup (I believe). My next requirement is that when clients from Country A 
>access public web sites in Country B that the data only travel outside 
>IPsec protection while in Country B.

How do you propose knowing what IP addresses are in Country A, Country B, 
and in "all other countries"?  Figure that one out first (grin).


Bill Plein
w dot plein at gmail dot com