"Stephen J. Turnbull" wrote:

> I wrote:
>
>   For the first time I tried accessing the coda file system over a Linux
>   IP masqueraded link and found that only files below some size (not
>   exactly known, something more than 2000 bytes, I think) would be
>
> >>>>> "Greg" == Greg Troxel <gdt_at_fnord.ir.bbn.com> writes:
>
>     Greg> I'm surprised it worked that well.  I suspect that the basic
>     Greg> rpc2 is working through masquerading, and that the side
>     Greg> effects are not.  I'd suggest hacking the masquerading to
>     Greg> make it also masq the -se ports merely from having seen the
>     Greg> forward traffic on the regular rpc2 ports.  (Run tcpdump on
>     Greg> a venus with a real address to figure things out.)
>
> Is this something desirable for itself?  I eventually plan to move to
> a VPN using ssh tunnels (available "stock" in a Linux HOWTO), or maybe
> IPSec, to satisfy local firewall policy (to be implemented at a future

FWIW, we've been doing some preliminary stuff using Free/SWAN
(http://www.xs4all.nl/~freeswan/) and it seems to be working well...

    -t