Re: Simple way to securely access remote machine that's behind a NAT?

2018-09-30 Thread Manuel Bouyer
On Sun, Sep 30, 2018 at 08:38:13AM +0200, Johnny Billquist wrote: > > I think it's possible for a router to forward an IP protocol inward > > via NAT, such as GRE? Or am I mistaken? > > I've done that forever, and have been surprised that noone have even > suggested it. The original question did

Re: Simple way to securely access remote machine that's behind a NAT?

2018-09-29 Thread Johnny Billquist
On 2018-09-30 06:58, Andy Ruhl wrote: On Tue, Sep 25, 2018 at 8:49 AM David Young wrote: I added UDP encapsulation to gre(4) in NetBSD specifically to pierce NAT firewalls, however, I don't know if Linux also has a UDP encapsulation for GRE. That's pretty cool. I will try it at some point. Th

Re: Simple way to securely access remote machine that's behind a NAT?

2018-09-29 Thread Michael van Elst
acr...@gmail.com (Andy Ruhl) writes: >On Tue, Sep 25, 2018 at 8:49 AM David Young wrote: >> I added UDP encapsulation to gre(4) in NetBSD specifically to pierce NAT >> firewalls, however, I don't know if Linux also has a UDP encapsulation >> for GRE. I haven't seen a Linux kernel implementation

Re: Simple way to securely access remote machine that's behind a NAT?

2018-09-29 Thread Andy Ruhl
On Tue, Sep 25, 2018 at 8:49 AM David Young wrote: > I added UDP encapsulation to gre(4) in NetBSD specifically to pierce NAT > firewalls, however, I don't know if Linux also has a UDP encapsulation > for GRE. That's pretty cool. I will try it at some point. That plus a private IP address on both

Re: Simple way to securely access remote machine that's behind a NAT?

2018-09-28 Thread Michael Cheponis
Thanks everybody for help. I really liked the .onion setup idea, but I ended up using openvpn. The documentation is very good, and the relevant page for me was: https://openvpn.net/index.php/open-source/documentation/miscellaneous/78-static-key-mini-howto.html What is fantastic about openvpn is

Re: Simple way to securely access remote machine that's behind a NAT?

2018-09-25 Thread David Young
On Tue, Sep 25, 2018 at 03:04:56PM +0545, Brook Milligan wrote: > Just curious, could one also use either gre or gif to create a tunnel or does > NAT mess that up? I added UDP encapsulation to gre(4) in NetBSD specifically to pierce NAT firewalls, however, I don't know if Linux also has a UDP enc

Re: Simple way to securely access remote machine that's behind a NAT?

2018-09-25 Thread Greg Troxel
Two suggestions (but these can be additional - it's good to have multiple ways to win for remote devices): 1) Set up a tor hidden service. Install tor from pkgsrc, nad in the config file find the hidden service section, and set up (if it's running NetBSD; you just have to find the hidden service

Re: Simple way to securely access remote machine that's behind a NAT?

2018-09-25 Thread Brook Milligan
> On Sep 25, 2018, at 12:55 PM, Manuel Bouyer wrote: > > On Mon, Sep 24, 2018 at 06:04:44PM -0700, Michael Cheponis wrote: >> Hi, >> >> I have a (linux raspberry pi) that's remotely located and NATted in such a >> way that I cannot control that part of the infrastructure, although do >> have

Re: Simple way to securely access remote machine that's behind a NAT?

2018-09-25 Thread Don NetBSD
On 9/24/2018 6:04 PM, Michael Cheponis wrote: I have a (linux raspberry pi) that's remotely located and NATted in such a way that I cannot control that part of the infrastructure, although do have complete control of the machine otherwise (e.g. access to root). What I'd like to do is access it

Re: Simple way to securely access remote machine that's behind a NAT?

2018-09-25 Thread Manuel Bouyer
On Tue, Sep 25, 2018 at 03:04:56PM +0545, Brook Milligan wrote: > Just curious, could one also use either gre or gif to create a tunnel or does > NAT mess that up? Neither uses TCP or UDP packets, but others IP protocols. The NAT router doesn't have port information do demultiplex incoming packet

Re: Simple way to securely access remote machine that's behind a NAT?

2018-09-25 Thread Manuel Bouyer
On Mon, Sep 24, 2018 at 06:04:44PM -0700, Michael Cheponis wrote: > Hi, > > I have a (linux raspberry pi) that's remotely located and NATted in such a > way that I cannot control that part of the infrastructure, although do > have complete control of the machine otherwise (e.g. access to root). >

Simple way to securely access remote machine that's behind a NAT?

2018-09-24 Thread Michael Cheponis
Hi, I have a (linux raspberry pi) that's remotely located and NATted in such a way that I cannot control that part of the infrastructure, although do have complete control of the machine otherwise (e.g. access to root). What I'd like to do is access it from my local NetBSD system (which does hav