From owner-freebsd-net@FreeBSD.ORG Sat Jul 23 19:38:58 2011 Return-Path: Delivered-To: net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 69638106566B for ; Sat, 23 Jul 2011 19:38:58 +0000 (UTC) (envelope-from randy@psg.com) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:1::36]) by mx1.freebsd.org (Postfix) with ESMTP id 51EE38FC14 for ; Sat, 23 Jul 2011 19:38:58 +0000 (UTC) Received: from localhost ([127.0.0.1] helo=rair.psg.com.psg.com) by ran.psg.com with esmtp (Exim 4.76 (FreeBSD)) (envelope-from ) id 1Qki2L-0009Z8-Lb; Sat, 23 Jul 2011 19:38:57 +0000 Date: Sat, 23 Jul 2011 15:38:57 -0400 Message-ID: From: Randy Bush To: FreeBSD Net User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/22.3 Mule/5.0 (SAKAKI) MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka") Content-Type: text/plain; charset=US-ASCII Cc: Subject: netflix from japan X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Jul 2011 19:38:58 -0000 netflix streaming is not allowed to japan where we live. i can tunnel to a server in one of my racks in the states. the tokyo border is a soekris running FreeBSD 8. it will kinda look like .------------------------------. | | | b --wlan0| ...... Apple TV | r | WAN IIJ | i --- vr1| PPP/NAT ---|vr0[PPPoE][ppp]tun0--d | 192.168.0.0/24 Public IP Addr | g --- vr2| LAN hosts, | e | DHCP Clients | 0 --- vr3| ... | | `------------------------------' --- % cat /etc/ppp/ppp.conf iij: set device PPPoE:vr0 set MRU 1454 set MTU 1454 accept CHAP enable lqr add default HISADDR nat enable yes nat port tcp 192.168.0.33:51332 51332 nat port udp 192.168.0.33:51332 51332 nat port tcp 192.168.0.12:22 42022 set authname foo set authkey bar --- there seem to be at least two sets of problems o what are the ip addys and ports involved in netflix streaming set-up and delivery? o how to tunnel just those to/from a server in the states? anyone with suggestions? randy