I have two private class C networks, one for voice, one for my data. I made a single-port vlan on my data network's router with an IP address on the voice network. It's pretty cool being able to use the phones' DSL connection for internet when my data ISP goes down, and it works really well. But now I want to ssh from my phone router into my data network so I can still get to the server when the data ISP goes down. When I run sshd on port 23, everything works perfectly. But all port 22 connections are silently dropped by the data router. I created a logging entry on the Phone router's OUTPUT chain, and there's the packets. But a log entry on the data router's FORWARD chain never sees them. A) Is my vlan solution the right way to interface the two networks? B) How can I figure out who's eating all the port 22 packets?