I am just after some feedback on the behavior of traffic from the VPN
master to the client when the source of the original packet is the client
VPN address (also external nat address). The Master sends the packet
through the tunnel even thought the client VPN address is not a protected
network and the routing table should direct it else where. Is this just
the way it works?

If you are simply pinging to or from BM this is fine as BM seems to strip
the frame and replies, if the frame is destined for the NATed private
network BM appears to eat it.

If you are wondering we are attempting to direct FTP access to an
externally available server around the VPN.

BM - 3.6.2A, NW 6.0.3, HW,

Any feedback appriciated, let me know if any further clarification is

Thanks, Andrew