<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.6000.16544" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=360245613-15102007><FONT face=Arial
color=#0000ff size=2>Openswan uses IPSec to encrypt tcp/ip traffic between two
host computers.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=360245613-15102007><FONT face=Arial
color=#0000ff size=2>It can also tunnel traffic from networks connected to those
computers through the encrypted connection.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=360245613-15102007><FONT face=Arial
color=#0000ff size=2>It requires cooperation and setup/configuration between
both end hosts.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=360245613-15102007><FONT face=Arial
color=#0000ff size=2>It is a secure virtual private network tool, not a proxy
server.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=360245613-15102007><FONT face=Arial
color=#0000ff size=2>It is not designed to do what your
requesting.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=360245613-15102007><FONT face=Arial
color=#0000ff size=2>In theory you could setup a tunnel with a cooperating host
in the US, which could forward traffic on your behalf.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=360245613-15102007><FONT face=Arial
color=#0000ff size=2>However, you would either need to send all internet traffic
down the tunnel or setup a separate tunnel for each</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=360245613-15102007><FONT face=Arial
color=#0000ff size=2>ip you wanted to connect to via the tunnel. Neither is a
good solution.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=360245613-15102007><FONT face=Arial
color=#0000ff size=2>Your probably better off investigating GRE to accomplish
your goals.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=360245613-15102007><FONT face=Arial
color=#0000ff size=2>But you'll still need a cooperating host in the US for GRE
as well.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=360245613-15102007><FONT face=Arial
color=#0000ff size=2>If you have a friend in the US to connect to, search the
net for: gre linux</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=360245613-15102007><FONT face=Arial
color=#0000ff size=2>You should find lots of documentation on setting it
up.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=360245613-15102007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV>
<DIV align=left><FONT face=Arial size=2>Peter McGill</FONT></DIV>
<DIV> </DIV><BR>
<BLOCKQUOTE dir=ltr
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> users-bounces@openswan.org
[mailto:users-bounces@openswan.org] <B>On Behalf Of </B>Sysin
G<BR><B>Sent:</B> October 13, 2007 10:09 AM<BR><B>To:</B>
users@openswan.org<BR><B>Subject:</B> [Openswan Users] Newbie question: Using
openswan as a proxy server<BR></FONT><BR></DIV>
<DIV></DIV><FONT size=1><FONT size=1>
<P>Hello,</P>
<DIV>I've been going through HOWTOs and documentation and I'm trying to figure
out </DIV>
<DIV>if Openswan is the the right tool for the job, and how to set this
up.</DIV>
<P>My setup is:</P>
<DIV>Home machine (Windows XP) <A
href="http://192.168.0.2">192.168.0.2</A></DIV>
<DIV>Home router LAN (Linksys WRTP54G) <A
href="http://192.168.0.1">192.168.0.1</A></DIV>
<DIV>Home router WAN xx.xx.xx.xx</DIV>
<DIV>Remote machine (Fedora FC6) yy.yy.yy.yy</DIV>
<P>My goal is:</P>
<DIV>To set things up so that, when accessing certain sites from home,</DIV>
<DIV>all traffic will be routed through the remote machine. The reason</DIV>
<DIV>is that I live in Europe, and I want to access certain TV and radio</DIV>
<DIV>sites that will only serve content to US hosts.</DIV>
<DIV> </DIV>
<DIV>Some of these sites are now sofisticated enought that a simple HTTP</DIV>
<DIV>proxy will not trick them.</DIV>
<DIV> </DIV>
<DIV>Is Openswan the right tool? Are there any resources that describe</DIV>
<DIV>setting up a system like this?</DIV>
<DIV> </DIV>
<DIV>Many thanks,</DIV>
<DIV> </DIV>
<DIV>Simon</DIV>
<DIV> </DIV></BLOCKQUOTE></FONT></FONT></BODY></HTML>