A tunnel should be placing the output device as the encapsulating address
for the tunnel. Probably that should be looked up when you up the interface
and bound. You can't use other addresses as people very aggressively filter
bad sources nowdays
> > Another thing I'd like to do is add IPIP compression to the tunnel driver.
> > What's the best way to go about it?
> I believe you need to invent new protocol and register it to avoid
> conflicts :-)
If you use IPIP then providing both ends agree anything goes. It would
probably be more polite to use compressed data in UDP to a port of
your choice.
Another option is to implement L2F/PPTP.
> Nope, it should not be IPIP. Unfortunately, IPIP protocol is
> interpreted specially by several IP stacks. It is not worth
> to confuse them.
Oh its great fun. The IP to 127.0.0.1 in IP in IP in IP in IP ..
(repeat to 64K) packet is a fantastic way to play "shoot the computer"
with some stacks.
The point is valid not so much because of IP stacks but because some
very smart firewalls look into IPIP headers.
Alan