Hello Augustine,
Further, what would the technical termanology be for
" forwarding all
IPIP traffic received
by your brother's computer to your computer over the local network" ??
It would be called "forwarding" or "routing". Anyway, I was thinking
about your problem last night and I have a question and a fifth option:
- WHY is your brother's computer on the DMZ segment? Is there a
specific reason? If his computer is serving standard traffic like
HTTP/HTTPS, DNS, SMTP, whatever, all of those things can be forwarded
via your ISP provided router using a technology called "port
forwarding. At this point, you could put YOUR computer on the DMZ
segment and make things simpler. The only reason I can think of that
your brother would want to keep his machine on the DMZ port is for some
other specific GAMING reason. PC computer games that aren't NAT
friendly are pretty rare these days but they still exist
If you rather keep your brother's computer on the DMZ port, I would
recommend the final option at the end of Rob's email to keep things
simple. A few things are going to be required per the Ubuntu HOWTO at
http://wiki.ampr.org/wiki/Ubuntu_Linux_Gateway_Example :
- You'll ideally want a static IP from your ISP - it's not
absolutely required and if you don't have one, you'll want to setup a
DynamicDNS system on the router from your ISP. Setting that up is
outside the scope of this AMPR list and will be specific to your
particular ISP supported router
As for the actual IPENCAP forwarding on your brother's computer, it's
mostly strait forward. To make your Internet searches more successful
if you have initial questions, do a search for "iptables gre protocol
forwarding". GRE is another IP protocol similar to IPIP but far more
common and thus you'll get more hits. From that search list, you'll
find posts like:
http://www.linuxquestions.org/questions/linux-networking-3/port-forward-greā¦
and more to the point
https://lists.debian.org/debian-firewall/2004/04/msg00103.html
In that second URL, you'll want to substitute protocol 47 for protocol 4.
--David
KI6ZHD