From owner-freebsd-questions@FreeBSD.ORG  Tue Jun 17 12:53:04 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id D6E6737B401
	for <questions@freebsd.org>; Tue, 17 Jun 2003 12:53:04 -0700 (PDT)
Received: from spork.pantherdragon.org (spork.pantherdragon.org
	[206.29.168.146])
	by mx1.FreeBSD.org (Postfix) with ESMTP id AA56843FA3
	for <questions@freebsd.org>; Tue, 17 Jun 2003 12:53:03 -0700 (PDT)
	(envelope-from dmp@pantherdragon.org)
Received: from speck.techno.pagans (12-206-23-247.client.attbi.com
	[12.206.23.247])
	by spork.pantherdragon.org (Postfix) with ESMTP id 9567915210
	for <questions@freebsd.org>; Tue, 17 Jun 2003 12:53:02 -0700 (PDT)
Received: from speck.techno.pagans (localhost [127.0.0.1])
	by speck.techno.pagans (Postfix) with SMTP id 65A855AB9
	for <questions@freebsd.org>; Tue, 17 Jun 2003 00:41:15 -0700 (PDT)
Date: Tue, 17 Jun 2003 00:41:10 -0700
From: Darren Pilgrim <dmp@pantherdragon.org>
To: questions@freebsd.org
Message-Id: <20030617004110.05473440.dmp@pantherdragon.org>
X-Mailer: Sylpheed version 0.8.9claws (GTK+ 1.2.10; i386-portbld-freebsd5.0)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Subject: Secure tunnel: SSH or SSL or IPsec?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Jun 2003 19:53:05 -0000

I need to create a secure connection over the inter between my workstation at
home and a server I have elsewhere.  My workstation is running RELENG_5_0 and
the server runs RELENG_4_8, both up to date.  I need the secure connection to 
occasionally access swat and VNC remotely.  You can assume all the ports I'll be
accessing are local to the server.  My workstation is behind a Linksys BEFSR
router doing NAT with an IPsec passthrough.

What would work best in this situation?