In reply to Lee Brotherston.

The strongest solution is to ipsec vpn all your connections.