From owner-freebsd-isp  Fri Aug  8 07:49:01 1997
Return-Path: <owner-freebsd-isp>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id HAA22144
          for isp-outgoing; Fri, 8 Aug 1997 07:49:01 -0700 (PDT)
Received: from irbs.irbs.com (jc@irbs.irbs.com [199.182.75.129])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id HAA22139
          for <isp@FreeBSD.ORG>; Fri, 8 Aug 1997 07:48:57 -0700 (PDT)
Received: (from jc@localhost)
	by irbs.irbs.com (8.8.5/8.8.5) id KAA13213;
	Fri, 8 Aug 1997 10:48:19 -0400 (EDT)
Message-ID: <19970808104819.40974@irbs.com>
Date: Fri, 8 Aug 1997 10:48:19 -0400
From: John Capo <jc@irbs.com>
To: Wm Brian McCane <root@bmccane.uit.net>
Cc: Alan Batie <batie@agora.rdrop.com>, Jakob Alvermark <jakob@teligent.se>,
        isp@FreeBSD.ORG
Subject: Re: Secure connection
References: <19970804075409.42752@agora.rdrop.com> <199708080507.AAA10485@bmccane.uit.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.69
In-Reply-To: <199708080507.AAA10485@bmccane.uit.net>; from Wm Brian McCane on Fri, Aug 08, 1997 at 12:07:24AM -0500
X-Organization: IRBS Engineering, (954) 463-3771
Sender: owner-freebsd-isp@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

Quoting Wm Brian McCane (root@bmccane.uit.net):
>
> determined ;).  I was wondering if anyone has a way to do this in FreeBSD so I 
> don't have to recommend using NT.  I pictured something like the ipdivert/natd 
> combination, except that the daemon I divert to would set up a connection to 
> the far end and pass ALL messages along to him.  Any suggestions?
> 

SKIP from Sun Microsystems will do exactly what you want.  Its an
LKM and no kernel mods are needed.  I am using SKIP to tunnel
between two RFC1918 networks that are behind FreeBSD firewalls.

The only problem I found, and it may not be a problem for everyone,
was that SKIP packets were being sent with the source address of
the internal, behind the firewall, RFC1918 host.  I modified the
code to use the interface address the packet is being sent from
for the packet source address.

http://skip.incog.com/source.html

John Capo	                        Embedded Hardware/Software Design
IRBS Engineering                 Unix/Internet Consulting - ISP Solutions