I got my ipsec transport connection to go from my home server to my work server and I could even send dns through it away from AT&T's prying eyes.

Unfortunately then any other computer behind my NAT couldn't talk my server.