You can do some pretty advanced stuff using Unix/Linux bridges -- you create a bridge between a real (eth0) NIC and a dummy NIC, then bridge vmware to the dummy NIC. This puts all of linux's powerful iptables commands "in front" of the vmware bridged network. So you could have default forwarding to one VM, and specify a few ports to go another if you wanted...
eth0 --> (IPTABLES EFFECT HERE) --> br0 --> dummy0- --> vmware bridge --> virtual machine ethernet
Without this, it is:
eth0 --> vmware bridge --> iptables effects --> host
|
----> vmware host
Check out: http://www.troublenow.org/19/firewall-vmware-server-10x-guest-with-iptables-on-the-host/