Host firewalls/VPNs: a solution

If discussing this, please do not duplicate here and use: