> Wait a sec...  I think I got lost.  You are on 192.168.3.0/24 and they
> are on 192.168.75/24, but to get to them you need to "appear" to be
> 10.100.2.0/24?  OK, this is doable, but you will need more boxes.  NAT
> goes out the WAN.  So you need a additional m0n0wall box.  WAN will be
> in your DMZ (10.100.2.10) and LAN will be in your LAN (192.168.3.10) and
> this box will VPN to them.  It will NOT have DHCP enabled.  You will put
> a static route in your m0n0wall box with 192.168.75.0/24 gateway at
> 192.168.3.10 (Your other box) and it will work.  Messy, but the only way
> to get this hack to work that I can think of.

Marty,

If your subnet mask at both sites are /24 (255.255.255.0), and Lee has
it correct (you are .3 and remote is .75), then traditional routing will
work just fine from 192.168.3.x to 192.168.75.x through the VPN.

Where it won't work is if you have a /16 bitmask as opposed to the /24.

Steve