Thanks again all of you. I implemented one of the metod mentioned here. It's probably the easiest way how to solve my situation. I' ve decided for SOCKS proxy provided by OpenSSH. Nevertheless I will have to solve DNS queries because they are not going by the encrypted tunnel, but I hope that some proxy on client side can help me. MK