From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1M1RKv-0003ob-CZ for garchives@archives.gentoo.org; Tue, 05 May 2009 20:33:57 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id BFA19E07CE; Tue, 5 May 2009 20:32:42 +0000 (UTC) Received: from smtp.hotchilli.net (mta3.th.hotchilli.net [62.89.140.53]) by pigeon.gentoo.org (Postfix) with ESMTP id 9FA0CE07CE for ; Tue, 5 May 2009 20:32:42 +0000 (UTC) Received: from static-87-243-200-80.adsl.hotchilli.net ([87.243.200.80] helo=[10.0.1.253]) by smtp.hotchilli.net with esmtp (Exim 4.63) (envelope-from ) id 1M1RJi-0001is-1A for gentoo-user@lists.gentoo.org; Tue, 05 May 2009 21:32:42 +0100 Message-ID: <4A00A266.9070102@shic.co.uk> Date: Tue, 05 May 2009 21:32:38 +0100 From: Steve User-Agent: Thunderbird 2.0.0.21 (Windows/20090302) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 To: gentoo-user@lists.gentoo.org Subject: [gentoo-user] A networking question... Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Archives-Salt: 3e7647c4-0b22-48f5-ada5-bed5d551cf50 X-Archives-Hash: 08e2e87aaf4f7863ffa9eb9f729d1c71 I've a gentoo box sat behind a firewall - it runs a apache and sshd with holes punched through NAT to allow remote access. It runs DHCP and DNS services for my LAN. I would like to run a second instance of apache on a fresh IP address - to simulate a hosted environment supporting https. I need to be able to access my second apache locally by URL on my LAN (which I can map however I chose using my DNS config.) I also need to be able to access this second apache from a remote site (assume gentoo again, for simplicity) over an SSL tunnel - even if the remote server already runs apache doing something else again. It isn't acceptable for the second apache to be accessible publicly. It's also unacceptable I'm think I probably want a VPN (or similar) - or maybe some sort of virtual network interface similar to those employed by VMWare for virtualisation... coupled with PPP over my ssh tunnel. Can anyone give me any hints - or, ideally, a link to a how-to? Thanks... Steve