"Stephen J. Turnbull" wrote:
> I wrote:
>
> For the first time I tried accessing the coda file system over a Linux
> IP masqueraded link and found that only files below some size (not
> exactly known, something more than 2000 bytes, I think) would be
>
> >>>>> "Greg" == Greg Troxel <[EMAIL PROTECTED]> writes:
>
> Greg> I'm surprised it worked that well. I suspect that the basic
> Greg> rpc2 is working through masquerading, and that the side
> Greg> effects are not. I'd suggest hacking the masquerading to
> Greg> make it also masq the -se ports merely from having seen the
> Greg> forward traffic on the regular rpc2 ports. (Run tcpdump on
> Greg> a venus with a real address to figure things out.)
>
> Is this something desirable for itself? I eventually plan to move to
> a VPN using ssh tunnels (available "stock" in a Linux HOWTO), or maybe
> IPSec, to satisfy local firewall policy (to be implemented at a future
FWIW, we've been doing some preliminary stuff using Free/SWAN
(http://www.xs4all.nl/~freeswan/) and it seems to be working well...
-t