README from the ipip encapsulation daemon as distributed by Bdale Garbee N3EUA.

This is a derivation of Mike Westerhof's ipip daemon for Unix machines.  It is
currently in use under BSDI's BSD/386.  The Makefile and so forth are very
BSD specific, though I believe it will work on any of the free BSD's out there.

If on a BSDI machine, unpack this in /usr/src/local/ipip, and do:

	make obj
	make depend
	make
	make install

There are two options in the Makefile.  If you include -DBDALE, the daemon will
allow routing packets back out the same interface they came in on.  This is
useful if you have a "firewall" on your corporate network and want to run the
daemon as a "bent pipe" on a machine that sits atop the firewall.  If you
include -DAMPRONLY, then any packets which do not have both source and
destination addresses in network 44 get dropped on the floor.  After we had a
non-ham on the Internet attack one of our net-44 subnets, we implemented this
firewall, and now use a mixture of MX records pointing via a dual-homed host
and socks services to do everything we want from the network 44 side while
presenting a blank wall to non-net-44 initiated connections.  Ugly, but it
works.

If you have questions about this stuff, I can be reached as bdale@gag.com.  If
you make changes or improvements, please send them along so I can update
the distribution.

The key changes from Mike's original are the use of syslog for logging, changes
in the size of the route table allowed, the ability to route back out the
same interface a packet was received on, the firewall, and random BSD'isms.  
Mike certainly should get all the credit for making this work initially... it
has made life much simpler for me, at least!

I'll borrow a page from Rich Salz... if you put this up and run it, and like
it, how about sending me a QSL card, or a postcard?  I'm good in the callbook
and associated databases... and the poured-concrete walls here in "The Bit 
Basement" could use more wallpaper...  :-)

73 - Bdale, N3EUA
