For the second weekend in a row, I maganged to screw up the firewall remotely, forcing me to drive into work to put us back on the net. The firewall software we are using Shorewall is excellent, but you can still shoot your foot off with a configuration error. I finally got PPTP traffic to make it through our firewall to a staticly NAT'd internal server. I still haven't figured out why I wasn't able to do it with port forwarding, but at this point I just don't care.