ok, i'm starting to poke around with IPsec.

looks to me like there's now way to forward an inbound IPsec connection to
a host on the lan side...

or am i missing something?

jj