[wellylug] Router piercing

[Geraint M. Jones]

The obvious option as I see it is IPSec VPN - it will mean opening maybe
3 ports but will make each pc totally open to eachother (unless you
firewall inside the vpn) so with one connection you can do anything you
wish with any software you wish - and fairly securely too

http://www.tomsnetworking.com/Sections-article49-page1.php


Geraint Jones
Systems Administrator 
French Maid Foods Limited
www.french-maid.net
 
DDI: +64 (0)4 570 7633
Tel:  +64 (0)4 568 2687
Fax:  +64 (0)4 568 2345
Mob: +64 (0)21 739 240

-----Original Message-----
From: wellylug-bounces at lists.wellylug.org.nz
[mailto:wellylug-bounces at lists.wellylug.org.nz] On Behalf Of Bret
Comstock Waldow
Sent: Saturday, 10 December 2005 11:36 a.m.
To: wellylug at lists.wellylug.org.nz
Subject: [wellylug] Router piercing

Hi,

I'm just getting started working out how to do this, and wondered if
anyone 
had some suggestions what to look at and to ignore.  I'm looking for a 
conceptual fix on the whole business.

The immediate situation is that I and I friend both have broadband
connections 
going through Linksys WRT54G NAT routers, with factory firmware.

We would like to establish a connection that allows us to share
desktops, use 
voip, share files, without compromising the security of our machines.

In time, I might want to do the same with another friend who connects by
modem 
without a router.  Also, in time, there is the possibility of using the
same 
approach to work remotely, which is likely to involve contacting a
Window$ 
computer on the other end.  These might be different things, and they're
not 
so immediate, but if it influences suggestions of what to look into, I
figure 
I should mention it up front.

I've noticed 'vnc', 'ssh tunnels', and lots of kernel options with the
word 
'tunnel' in them.  Are they all about the same thing?  Are there several

approaches?  I'm after the 10,000 foot view first, although I'd be happy
to 
hear anything you think is useful about the matter.

And I'll start reading now, but time is limited, so any benefit of your 
experience about what to focus on would be appreciated.  I'd be
particularly 
interested in thoughts about aftermarket router firmware which might
also 
improve wifi security as well.  I'm only using WEP now, and understand I
need 
to get WPA working.  What else?

Cheers,
Bret