Listing 4. Complete vtund-server.conf options { port 5000; # Path to various programs ifconfig /sbin/ifconfig; firewall /sbin/iptables; route /sbin/route; } # Default session options default { compress no; # Compression is off encrypt no; # ssh does the encryption speed 0; # By default maximum speed keepalive yes; stat yes; } my_tunnel { pass XXXXXXXX; # Password type tun; # IP tunnel proto tcp; # TCP protocol up { # 10.3.0.1 = fake tunnel interface (home-end) # 10.3.0.2 = fake tunnel interface (work-end) # 192.168.1.0/24 = actual home network ifconfig "%% 10.3.0.2 pointopoint 10.3.0.1 mtu 1450"; route "add -net 192.168.1.0 netmask 255.255.255.0 gw 10.3.0.1"; firewall "-t nat-A POSTROUTING -o %% -j MASQUERADE"; firewall "-AFORWARD -i %% -j ACCEPT"; }; down{ ifconfig "%% down"; route "del -net 192.168.1.0 netmask 255.255.255.0 gw 10.3.0.1"; }; }