Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 08 Oct 2000 22:56:48 -0700
From:      Mike Thompson <mpthompson@home.net>
To:        freebsd-security@freebsd.org
Subject:   Encrypted IP tunneling solution
Message-ID:  <4.3.2.7.2.20001008220611.085d2f00@mail.atomz.com>

next in thread | raw e-mail | index | archive | help
I've created a fairly simple little application called stun that 
essentially combines the functionality of nos-tun with SSH.  Stun does for 
IP tunneling what sftp does for FTP -- it makes it trivial to set up the 
highly secure tunneling of raw IP packets between any two FreeBSD systems 
that have SSH and tunneling devices (/dev/tunXX) enabled.

Although similar functionality can be had with binding a PPP socket to SSH 
or setting up IPSEC, I found that neither of these solutions were very easy 
to implement correctly.  I wanted something that would bit simpler for 
someone with limited Unix admin skills to get working in a reliable manner.

My purpose behind this email is to gauge the interest this little 
application.  I currently have it implemented at the experimental stage 
right now where it seems to work well, but it has not been extensively 
tested.  Unfortunately my time is very limited to work on this, but if 
there is sufficient interest I would be glad to help someone else evolve it 
to the point where it is proven to work well and can be contributed to the 
FreeBSD ports collection.

If you are interested, let me know.  I'm more than happy to share it, but I 
guess I'll have to slap a BSD style copyright on the source code first 
:-).  Also, if you know of a similar application already in existence, 
please let me know so I don't waste my time.

BTW, my ultimate goal behind this little application is to get it working 
with Windows clients running SSH protocols where it can serve as a very 
simple, but secure VPN solution.  As one might expect, it has proven to be 
much easier to write the FreeBSD/Unix side of things than the Windows side 
where a virtual NDIS VxD driver or some similar beast will have to be 
implemented.

Mike Thompson
mike@atomz.com
CTO/Co-Founder Atomz.com



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4.3.2.7.2.20001008220611.085d2f00>