As you so rightly say, the telnet connection can't, of itself, be 'directed', but temporarily modifying the routing tables c/w specifying the ip address of a known target host (assuming that each iface is connected to a separate network), should, IMHO, be capable of emulating the capability you seek...