From: stephen@dino.dnsalias.com   
      
   "Kissingfish"  writes:   
   > wouldn't it be easier just to have one dynamic tunnel from the client   
   > to the outer FW and then a peer to peer static VPN from the outer FW to   
   > the inner FW and just get the outer FW to do the routing?   
      
   I suggested the double tunnel approach because I (mis)understood from   
   a previous reply that you didn't want to creat a permanent link   
   between the two firewalls.  I assumed this was because you were   
   worried that if outer firewall is compromised then this would then   
   provide access through your inner firewall over the tunnel.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)