You can use two OpenBSD systems to tunnel Ethernet-over-IP. I did this between two sites each with a 2M/256K ADSL cct (same ISP), and clustered an Alphastation at one site to SimH VAX at another (remote disk access was slow...) Simple PF rules would block all IP on the tunnel, but not sure if you could specify to allow only DECnet frames across. Cheers, Andrew On (15:31 09/11/09), Sampsa Laine wrote: Guys, I realise that at the moment there aren't many people involved that do not have static IPs but I think as time goes on consumer grade ISPs are going to start cutting back on the amount of IPs a residential customer can have. With this in mind, might there be some mileage in setting up a VPN for HECnet use? This way we would not need to worry about whether we have public static IPs in the future (most VPNs are happy to work with DYNDNS etc) and it would also add a layer of security to HECnet without any changes needed to the bridge etc. Sampsa -- Andrew Back a at smokebelch.org