From owner-freebsd-isp  Thu Aug  7 22:08:00 1997
Return-Path: <owner-freebsd-isp>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id WAA22720
          for isp-outgoing; Thu, 7 Aug 1997 22:08:00 -0700 (PDT)
Received: from bmccane.uit.net (bmccane.uit.net [208.129.189.48])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id WAA22708
          for <isp@FreeBSD.ORG>; Thu, 7 Aug 1997 22:07:47 -0700 (PDT)
Received: from bmccane.uit.net (localhost.mccane.com [127.0.0.1])
	by bmccane.uit.net (8.8.6/8.8.5) with ESMTP id AAA10485;
	Fri, 8 Aug 1997 00:07:25 -0500 (CDT)
Message-Id: <199708080507.AAA10485@bmccane.uit.net>
X-Mailer: exmh version 2.0gamma 1/27/96
To: Alan Batie <batie@agora.rdrop.com>
cc: Jakob Alvermark <jakob@teligent.se>, isp@FreeBSD.ORG
Subject: Re: Secure connection 
In-reply-to: Your message of "Mon, 04 Aug 1997 07:54:09 PDT."
             <19970804075409.42752@agora.rdrop.com> 
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Fri, 08 Aug 1997 00:07:24 -0500
From: Wm Brian McCane <root@bmccane.uit.net>
Sender: owner-freebsd-isp@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

Not exactly on topic, but close....

I have a customer that wants to set up a secure connection between 2 locations 
in Kansas.  The driving factor for this is that they have decided that they 
MUST have a WAN between their 6 offices (soon to be 5), and the connection to 
this one little location costs more than the other 4 combined.  Anyway, what I 
am wanting to do is give them a VPN, with a low-grade of encryption.  (Nothing 
fancy, the tunneling will slow down the curious, and nothing stops the 
determined ;).  I was wondering if anyone has a way to do this in FreeBSD so I 
don't have to recommend using NT.  I pictured something like the ipdivert/natd 
combination, except that the daemon I divert to would set up a connection to 
the far end and pass ALL messages along to him.  Any suggestions?

	brian