From owner-freebsd-net@FreeBSD.ORG Sun Feb 8 03:20:19 2004 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 50FB416A4CF for ; Sun, 8 Feb 2004 03:20:19 -0800 (PST) Received: from mail002.syd.optusnet.com.au (mail002.syd.optusnet.com.au [211.29.132.32]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6B9D743D1D for ; Sun, 8 Feb 2004 03:20:18 -0800 (PST) (envelope-from tfrank@optushome.com.au) Received: from marvin.home.local (c211-28-241-189.eburwd5.vic.optusnet.com.au [211.28.241.189])i18BKFV08493; Sun, 8 Feb 2004 22:20:15 +1100 Received: by marvin.home.local (Postfix, from userid 1001) id 082253EF; Sun, 8 Feb 2004 22:20:15 +1100 (EST) Date: Sun, 8 Feb 2004 22:20:14 +1100 From: Tony Frank To: Tuc at the Beach House Message-ID: <20040208112014.GE92622@marvin.home.local> References: <200402030225.i132Pfax071987@vjofn.tucs-beachin-obx-house.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200402030225.i132Pfax071987@vjofn.tucs-beachin-obx-house.com> User-Agent: Mutt/1.4.1i cc: freebsd-net@freebsd.org cc: tuc@ttsg.com Subject: Re: Whats the best solution? X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Feb 2004 11:20:19 -0000 Hi there, On Mon, Feb 02, 2004 at 09:25:41PM -0500, Tuc at the Beach House wrote: > I want to be able to set something up where I can tunnel to a > dedicated private server I have on the global internet, and route all > my traffic through it. I want it to be the default route, and once they > hit my end server, they then can be forwarded over the rest of the global > internet. > > I need to be able to have the client be on dynamic IPs. I need some > sort of an authentication. And most of all, something easy to debug would > help. I assume your client is running FreeBSD, the suggestions below will work with other OS but the solution details will be up to you. If you have a dedicated server someplace on the internet you should be able to setup a tunnel to that server and route all your traffic through that. Some tunnel options: ipsec based vpn gre tunnel (man 4 gre) ppp over udp ipv6 tunnel (check out /usr/ports/net/freenet6) pptp (either through netgraph or ports pptpd) l2tp (ports l2tpd) Should be something to get you started, Tony