when I make right(and left)protoport:icmp,only this protocol can be use to reach the other end of the VPN. All other protocols are discarded. is there a way to change it and to allow other protocols to be used without passing through the VPN ? rgds david