Click to See Complete Forum and Search --> : routing traffic through home box
Strogian
11-16-2003, 11:58 AM
Is there a way I can route my internet traffic from my windows computer here, through my home box, and possibly have it encrypted?
i.e.
---------- ----------
| | | |
| Windows| -encryption-> | Linux | ---------> INTERNET
| | | |
---------- ----------
fredg
11-16-2003, 12:05 PM
You would need to describe the connection mechanism between the two boxes that you want encrypted.
You can enable MASQUERADING on the Linux box to route the traffic. And use Stunnel to encrypt. http://www.stunnel.org
MASQUERADING can be done with IPtables. On http://www.simonzone.com there is a tool Guidedog wich also does what you want I believe. (routing)
Strogian
11-16-2003, 12:52 PM
The windows box and the linux box are connected through the internet. And the linux box will un-encrypt what it gets and send the packets to wherever they are supposed to go.
Basically, I want it to look, to the outside world, like I'm doing everything from the linux machine, not where I'm at right now. Will stunnel/iptables do this for me?
I can do it already in certain circumstances, unencrypted. Like, in Medal of Honor, I can set it to connect to my home Linux box as the server, and then have the Linux box set up to forward those packets to the real server. But I have to prespecify where I really want the packets to go, and it's a lot of fuss to change it. I'm trying to get beyond this. :)
EDIT: Oh, it looks like I'm going to want to use pppd & stunnel on the linux box to decode the traffic.
I don't know how to change the route of the traffic. You can start Stunnel on the Linux pc and the Windows pc, and then you can let Stunnel on the Linux pc decrypt the traffic coming from the Windows pc where another stunnel encrypts the traffic. I only would wait with Stunnel until I got the routing working.
Stunnel is meant for encryption, so you should use something different for the routing.
Strogian
11-17-2003, 10:47 AM
Ah all right. Anyone know how to handle the routing? I know it would not be too difficult if I just had another linux box on this side, but with only a windows machine here, it's tougher.
I believe what you want is called port forwarding, but I'm not really sure. You can read about it on http://www.simonzone.com. Just click on Guidedog.
Shorewall (and prophably many other firewalls) also supports this feature, but I thought I read on the shoreall site that it only changes traffic from internet to the local network. http://www.shorewall.net is down now so you can try http://shorewall.sourceforge.net
Am I wrong or isnt samba for linux2windows networking? Could be wrong tho...
Strogian
11-17-2003, 05:40 PM
Samba is just for accessing the "shared resources" on a "windows network." It's not quite what I'm trying to do. ;)
And I actually do have a port forwarding setup right now, but as I said, I have to manually set up where I want the linux computer to send the packets, and the software on my Windows machine must let me specify the IP where I want the packets to be sent.
I'm thinking of some sort of tunneling/encapsulation scheme. E.G. the windows box wants to send a packet to 123.123.123.123, but some sort of intermediate driver/program encapsulates that in another packet to actually go to my linux pc, which then strips off that layer and sends the original packet out to 123.123.123.123. I'm just not aware of any free windows programs that do this. (I would be happy even knowing how to write such a program, but I have no idea where to start, without making this a lifetime project :))
You can setup a proxyserver on the Linux box and then use Proxycap that's installed on the windows box to connect to that proxyserver. Proxycap can route all your traffic to your linux box. On http://www.proxblind.org you can get find more info about these kind of programs and there is also a great forum.
Sockscap is similair, but is free.
Proxycap: http://proxylabs.netwu.com
Sorry if I'm bothering you. It's a bit unclear to me what you want to do.
Strogian
11-17-2003, 08:01 PM
That proxy stuff looks like it just may be what I need. :cool:
And to clarify what I am trying to do:
Let's say I have a computer at home. I can do whatever I want there, play games, browse the web, etc.
Now I am not at home. I am actually on a different computer. But if I get this working the way I want, it looks like I am still doing everything from that computer. The packets are all sent, using the Internet, to that home computer, and it takes them and puts them wherever they need to go. And any responses from the servers are also routed back to me, through that home computer. So if I browse, from this computer, to http://www.yahoo.com, it will automatically say to my home computer "ok, I'm trying to browse to http://www.yahoo.com now," and the home computer will fetch that webpage and forward it to me. yahoo only deals with my home computer, but I get the webpage. And I want it to work with anything, not just webpages. (i.e. games, ftp, etc.)