>  so you need to put in rules to allow GRE
> packets to the vpn router (I think it's protocol type 42)

protocol 47, actually.

(I had to look it up too). :)

Carl Soderstrom
-- 
Network Engineer
Real-Time Enterprises
(952) 943-8700