Does anyone know if it's possible to make an RV042 port forward or DMZ-host to an IP address that is on the remote side of a VPN connection? Here's the scenario: 1. use fast ISP with black listed IPs at office with RV042 as FW 2. put RV042 co-located at an ISP with clean IPs 3. have office RV042 VPN to the co-located RV042 (Gateway to Gateway) 4. Setup DMZ-host or port-forwarding on co-lo RV042 send the traffic to an IP on the LAN at the at office (ie in at the co-lo RV042, over VPN to RV042 at office, to IP on LAN there). Obvious problem: the UI requires the DMZ IP address and port forwarding targets to be IPs in the LAN subnet. I tried to circumvent this by making VPN subnet a subnet of the LAN subnet of the co-located RV042. The routing table even shows an entry for the sub-subnet to go over the ipsec port. Unfortunately, it doesn't seem to work. Anyone know if I"m wasting my time on this (e.g. the rv042 just dumps the port forwarding traffic out the LAN ports regardless of a more specific match in the routing tables?) Thx in advance.