Hi I need a hint as to what can cause these symptoms. I've set up an OpenVPN tunnel from an external laptop to a net through a SUSE Firewall 2. I can ping the firewall and all machines on the net from the external laptop. I can ssh to the firewall on the internal address, ie the address used on the net. But I can't ssh to the other machines on the net (or do anything else meaningful) The fact that I can ping the internal machines gives me that the route is correct and that there's a hole for the tunnel through the firewall. It could look like a protocol thing. But I can't see anye settings that would allow ICMP and block TCP. Am I missing a vital setting? Next step would be to debug w/ethereal or tcpdump. I'd just like to see if someone had been there before me.