Routing and VPN troubles...

[Artyom V. Viklenko]

Mitch (bitblock) wrote:
> 
> The VPN stuff might be easy if I could figure out how to make FBSD1-3 route
> through FBSD4 (regardless of the fact that they are all on the same
> subnet... the traffic from FBSD1 needs to "bounce" off FBSD4 on it's way to
> FBSD3 for example... either that, or maybe the gif interfaces count as
> distinct interfaces for routing?

May be nos-tun, mpd (PPPoE), or even native netgraph solutin can help.
(There is one example for udp tunnel in /usr/share/examples/netgraph).
In both cases you will got separate interface for each connection.
But, in any case, if all FBSD1-3 boxes can communicate whit each other
directly, you have to apply appropriate rules on these boxes
to make this impossible.

Hope this can help you a bit.

-- 
        Sincerely yours,
                          Artyom V. Viklenko.
======================================================
System Administrator            artem at mipk.kharkiv.edu
------------------------------------------------------
IIAT NTU "KhPI" 21, Frunze Str., Kharkov Ukraine 61002
Phone: +38 (0572) 400026        Fax: +38 (0572) 474062
======================================================