From owner-freebsd-questions@FreeBSD.ORG  Sat Jun 14 03:29:50 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 0C58137B405
	for <freebsd-questions@freebsd.org>;
	Sat, 14 Jun 2003 03:29:50 -0700 (PDT)
Received: from mail.gmx.net (pop.gmx.net [213.165.64.20])
	by mx1.FreeBSD.org (Postfix) with SMTP id BADC443FBF
	for <freebsd-questions@freebsd.org>;
	Sat, 14 Jun 2003 03:29:48 -0700 (PDT)
	(envelope-from mfromwald@gmx.at)
Received: (qmail 8944 invoked by uid 65534); 14 Jun 2003 10:29:47 -0000
Received: from chello062178160230.10.14.vie.surfer.at (EHLO menterg)
	(62.178.160.230)
	by mail.gmx.net (mp003) with SMTP; 14 Jun 2003 12:29:47 +0200
From: "Moritz Fromwald" <mfromwald@gmx.at>
To: freebsd-questions@freebsd.org
Date: Sat, 14 Jun 2003 12:29:55 +0200
MIME-Version: 1.0
Message-ID: <3EEB1543.8086.97DA16C@localhost>
Priority: normal
X-mailer: Pegasus Mail for Windows (v4.11)
Content-type: text/plain; charset=US-ASCII
Content-transfer-encoding: 7BIT
Content-description: Mail message body
Subject: Secure File Acces
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: mfromwald@gmx.at
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 14 Jun 2003 10:29:50 -0000

Hello
I have the following Setup:
ADSL Modem
	|
PPPoE Tunnel, possibly up to 8 IP available
	|
FreeBSD 4.4 NAT, ipfw deny any to ip of tun0
	|		ipfw allow ssh from admin-IP to ip of tun1
	|
SAMBA Server on FreeBSD 4.7

I would like to create a secure access from the Internet to the 
data on the file server using vpn. 
Are there more secure solutions?
Which ports will I need?
How to tunnel through the NAT-Gateway?

TIA  

Regards

Moritz Fromwald