Choosing which interface to use

2006-04-07 Thread hal

I am setting up a VPN client on a 6.0 box of mine.
As a result of the VPN client (openvpn) running I
have two interfaces active, xl0 needed by the dhcp
client and tun0 used by the vpn client.

The question.  How do I tell an application perhaps telnet,
ssh, or ftp to use tun0 and not xl0?

hal
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Choosing which interface to use

2006-04-07 Thread Bill Moran
hal [EMAIL PROTECTED] wrote:

 I am setting up a VPN client on a 6.0 box of mine.
 As a result of the VPN client (openvpn) running I
 have two interfaces active, xl0 needed by the dhcp
 client and tun0 used by the vpn client.
 
 The question.  How do I tell an application perhaps telnet,
 ssh, or ftp to use tun0 and not xl0?

Ideally you would set up appropriate routes when you establish the VPN
tunnel, and the kernel would know the correct direction based on the
destination IP address.  Since this isn't the case, I strongly suggest
that you look into cleaning up your IP ranges so it can be.  Never allow
half-baked routing to exist, it just causes more and more headaches the
longer you let it go.

However, many programs have an option to control where the source port
originates from.  If the application you want to use supports this, you
can specifiy the IP of your end of the VPN tunnel and it should force
the traffic to go through the tunnel.  ssh, for example uses -b to set
the originating IP.

I'll reiterate, however, that the _best_ way is to properly organize
your routing so it happes automagically.

-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Choosing which interface to use

2006-04-07 Thread guru
El día Friday, April 07, 2006 a las 08:29:03AM -0600, hal escribió:

 I am setting up a VPN client on a 6.0 box of mine.
 As a result of the VPN client (openvpn) running I
 have two interfaces active, xl0 needed by the dhcp
 client and tun0 used by the vpn client.
 
 The question.  How do I tell an application perhaps telnet,
 ssh, or ftp to use tun0 and not xl0?

This is not a question of telling the application to use certain
interface, xl0 or tun0. You will direct this application to some
remote IP addr and the routing table defines the interface to be used.

Have a look at 'netstat -rn' and add more routings if necesary.

matthias

-- 
Matthias Apitz / Sisis Informationssysteme GmbH
ein Tochterunternehmen der OCLC PICA B.V. Leiden (NL)
D-82041 Oberhaching, Gruenwalder Weg 28g
Fon: +49 89 / 61308-351, Fax: -399, Mobile +49 170 4527211
http://www.sisis.de/~guru/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]