Hi!

I have a linux box at my work place.
From home I connect to the net tru an ISP.

I can not figure out how to setup my linux box (iptables?) to use as a proxy server (?) for IP masking: I would like to access web resources from home that work only with workplace IP.

Both my home computer and the web resource are outside of my work network.
home (homeIP) ---> linux (workIP) ---> |web| ---> linux (workIP) ---> home

Thanks for your help,
Tamas

There are many levels at which you could approach this. If all you needed was access to your machine, you might try setting up ssh (with X forwarding if necessary). The next step up would be VNC. The most drastic would be a full-blown VPN. The `traditional' methods for each of these things would require listening on ports. This means that at your work, you either need your own public ip address (not nat/firewall) or you need to ask permission from the admin to enable port-forwarding.

There are other ways that involve your `at-work' computer initiating the connection. The only one I can think of is NAT-Traversal with IPSEC (when building a VPN). Unfortuantely this is very confusing to setup, and it is not guaranteed to work (but as long as there is only one user, it should work fine).

A very interesting setup

How about you setup remote administration for your workplace machine and log into it from home? This will allow you to work from home, but as if you were sitting at the workplace machine.

Have a talk with your sys/net admin at work and let him/her/(it?) know what you want, to see what they can help with. We can pick up from there, cause without the sys/net admin's approval it's gonna be a little more difficult/inappropriate to access the machine at the workplace remotely

Thaks for the ideas.

1. I do not think I want to setup a VPN :-)
2. "remote administration": I do not want to have the GUI forwarded (I have dial up at this moment)\

I already have ssh; I am thinking to move to bradband at home, so the easiest way seems to be ssh to my computer and working from there...

Tamas

Yes, but traditional ssh requires approval of your admin (for port forwarding). I cannot think of a good way to do `NAT-Traversal' as is done in IPSEC. The only thing I can think of is a little hack, that would involve making a connection from your work to your house, and making ssh listen on that connection.

Ssh is allowed (port forwarding for ssh is setup by sysadmin).