Whats the best solution?
will at unfoldings.net
Mon Feb 2 22:29:30 PST 2004
Have a look at the ssh(1) manpage. The port forwarding should be able to do
what you are looking for. Also, to get the authentication to be automatic,
set up your SSH to use public keys, and use a passphraseless public key on
your laptop. This will let it automatically log in and set up the tunnel.
You can then tunnel any TCP traffic through a secure channel to your server.
This is all described in the man page.
For DNS, use the IP address of the server you plan to use for the other end
of the tunnel. As long as you open only UDP port 53 and configure it
sensibly, there should be no security risk to running a DNS that accepts
from any IP, all proper DNS servers need to do this anyway. This way, you
can run your own DNS, and possibly even put in some private DNS tricks to
make working with the tunnel easier.
----- Original Message -----
From: "Tuc at the Beach House" <tuc at tucs-beachin-obx-house.com>
To: <freebsd-net at freebsd.org>
Cc: <tuc at ttsg.com>
Sent: Tuesday, February 03, 2004 4:25 AM
Subject: Whats the best solution?
> HELP! Whew, ok, felt good to get that out.
> Heres my problem, I'd like to know what people feel would be the
> best solution.
> I travel alot. When I do I bring a Wireless AP, and an Asante
> Firewall. Normally I plug the Asante into the ethernet connection at
> the hotel, and the WAP into the Asante.
> Some places I run into problem with their web proxy. Almost
> all places I have a hell of a time with DNS. When I have DNS issues, the
> machine just does not like it.
> I want to be able to set something up where I can tunnel to a
> dedicated private server I have on the global internet, and route all
> my traffic through it. I want it to be the default route, and once they
> hit my end server, they then can be forwarded over the rest of the global
> I need to be able to have the client be on dynamic IPs. I need some
> sort of an authentication. And most of all, something easy to debug would
> Any ideas, thoughts, suggestions, etc?
> Thanks, Tuc/TTSG Internet Services, Inc.
> freebsd-net at freebsd.org mailing list
> To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"
More information about the freebsd-net