> I have just starting experimenting with SKIP in hopes of building a secure
> tunnel between LANs.
> I have a question about the source address hiding feature:  Is there any
> functionality to source address hiding besides hiding the source address from
> prying eyes?  What I'm trying to get at is whether source address hiding is
> required for any particular feature of SKIP to work.  

I assume you mean with src address hiding that the packet going from
tunnel_end_1 to tunnel_end_2 does not carry the src address of the original
packet. This is sometimes absolutely necessary in order to have a tunnel 
since the original src address might get filtered sometime in between.
Say if you'd route a couple of ips over the tunnel, packets coming with 
a src address of those ips will probably be filtered by a third party and
will thus never reach the other end of the tunnel.
I made a patch for that some longer time ago, it's in the patch for
skip in the freebsd ports collection. Or you can get it seperately from 
ftp.r4k.net/pub/skip/.

> Also, if anyone knows of some good docs on how to set up SKIP tunneling 
> between networks please point me in the right direction.

Just read the docs that come with skip and some stuff in the mailinglist
archive.

bye,
Stephanie
----------------------------<> [EMAIL PROTECTED] <>-----------------<> FreeBSD <>---
        "I had to hit him -- he was starting to make sense."

Reply via email to