revjim rules. i now have vpnd running on my desktop and laptop and my desktop's forwarding IP packets. then i have our router reverse-NATing dns from its public port to my desktop.i setup my laptop in a configuration like starbucks and everything works now.... so now off to starbucks to test?
i should write a Mini-HOWTO now that it's all done. :-)
Update: Bleh, they're transparently proxying all DNS requests to their own DNS servers, that's why my dig command worked the other day. I should have noticed that then and saved myself 12 hours or so of work. Oh well... learned a lot in the process.