Free tunnel software for linux

Brutus is an Exchange connector and development framework that offers access to all of MAPI and therefore to all versions of Microsoft Exchange from version 5.5 onwards.
Brutus project is a complete wrapping of all of MAPI into a (large) set of CORBA interfaces. It enables any groupware client to integrate seamlessly into any organization with large Exchange deployments on an equal footing with MS Outlook.
Being based on CORBA, it is platform independent, and works equally well on Linux, the BSDs, Windows, or wherever there is a CORBA implementation available.
Enhancements:
- Logging of failure cases was generally improved.
- SSLIOP support has been removed.
- SSLIOP is no longer needed as Lorica will add CORBA firewall support as well as an SSLIOP tunnel between Brutus Server and any client application.
- MAPI object property scrambling was added.
- This is a new feature that makes it possible for an administrator to content scramble specific users.

SSL-Explorer project is the worlds first open-source SSL VPN solution of its kind. This unique remote access solution provides users and businesses alike with a means of securely accessing network resources from outside the network perimeter using only a standard web browser.
SSL-based VPNs have become a hot topic in recent years. The benefits to productivity and the low maintenance overhead that comes with browser-based VPN solutions are something that cannot be overlooked by most businesses, though implementation costs can often be prohibitive.
In contrast to a conventional IPsec-based solution, no client side code needs to be installed on your end users systems. SSL VPNs rely on Javatm based technology and hence require only a standard web browser to operate.
Standard network protocols can be tunnelled through the SSL connection, meaning that email and intranet web/file resources are easily and securely accessible from outside the corporate network.
The use of SSL is highly beneficial in these circumstances since most firewall policies grant access to SSL traffic by default, meaning that no additional configuration is required. Our solution is not a firewall, but it effectively allows you to lock-down your network, leaving just a single port open on your firewall.
Enhancements:
Core
- Restart message is not prominent when a parameter is changed which requires a restart.
- A newly created resource should be seen instantly to logged in users without users having to log out and back in again.
- Name search does not escape invalid XML characters from the username.
- Name search is unable to find users with a space in the name.
- HTTP header injection exploit.
- Policies not listed in resource info tooltip.
- No Restart notification displayed when a valid license is installed after an invalid license upload fails.
- The SingleConnection tunnel command when creating extensions does not work with the false flag.
- Page table should provide each page in blocks of 10 items.
- Some system properties dissapear if an extension fails to upload.
- Sessions are not cleaned up after user disconnects.
- Group page GUI refactored.
- Status page GUI refactored.
- License manager page GUI refactored.
- Replacements option moved under web forwards.
- Replacement variables do not contain session:username and password in agent server proxy tab.
- Weak ciphers have been disabled for default configurations.
- Extension store fails to download plug-in dependencies.
- Access right page has strange 5000 resource type exists.
- Policy selection page contains redundant up and down button functionality.
- Creating a user then cancelling during password assignment.
- Creating applications with integer parameters are unable to use user attributes.
- Remote tunnels do not show in tunnel monitor.
- SSL-Tunnel source interface has no validation.
- Pressing cancel in profiles page when the session has timed out causes an exception if you try to press cancel again.
- Profiles page refactored.
- Checking a checkox in global profiles is unchecked after you change tabs.
- If you have a User and a Group with the same name, these cant both be assigned to a policy.
- Assigning a user which doesnt exist to a policy throws an exception.
- User cannot create an attribute even though they have been given the access rights to do so.
- Description is not a required field when creating an attribute.
- Filter does not work in attributes.
- Attributes page GUI refactored.
- Extension page GUI refactored.
- If a disabled extension has an update available the info page shows an exception.
- Password authentication scheme should be the only authentication scheme whenever prompted for re-authentication.
- Authentication scheme page GUI refactored.
- An authentication scheme should be allowed to be primary if a secondary scheme also exists.
- Redirection when canceling out of selecting an authentication scheme at logon is incorrect.
Installer
- Stepping back through the installer and changing the certificate type causes unusual behaviour during installation.
- Installation of extensions step in installer is irrelevant.
- Insallation progress bar added.
- Selecting All interfaces in the web server configuration step causes the service to fail.
Internationalization
- Selecting default language or disabling user selecting language do not work.

Cubehub is a simple UDP over TCP tunnel application written in Java. It is designed to help people behind a firewall to connect through a TCP connection and play Quake and other UDP-based games.
SOCKS 4 and 5 are protocols that are supposed to allow users to send data through a firewall. However, they only work like this if the SOCKS server is on the firewall itself. Whilst TCP/IP traffic is frequently permitted through firewalls, UDP/IP (required by most online games) is often blocked. When a SOCKS 5 server relays UDP data (SOCKS 4 does not support UDP), the packets are simply relayed, there is no tunnelling involved.
This application provides a solution, tunnelling the data being relayed by a SOCKS server over one or (for better gaming performance) multiple TCP connections to help applications and games to work from behind a restrictive firewall.
Main features:
- Socks 4/5 server
- TCP and UDP tunnelling over single or multiple TCP connections
- Resilience against individual connection dropping

TunnelVision creates an encrypted VirtualPrivateNetwork, or VPN, between two Tunnel Vision-capable sites on the Internet.
TunnelVision creates an encrypted VirtualPrivateNetwork?, or VPN, between two Tunnel Vision-capable sites on the Internet. Realistically, that means sites with a Linux server running TunnelVision or with a WorldvisionsWeaver? or NetIntegrator acting as their Internet gateway.
TunnelVision requires a Linux 2.2.x kernel or later for running properly. Were sorry about that, but we wanted to use the new features.
Enhancements:
- Also known as 0.70pre2.
- Lots of underlying library changes as WvStreams v2 was debugged.
- A new way of handling strings and lists makes things prettier.
- Several bug fixes resulting from the use of our new stresstest program.
- Connections regenerate themselves after the 10-minute idle timeout.
- All known bugs have been eliminated.

Gnome SSH Tunnel Manager (gSTM) provides a convenient front-end for the cumbersome ssh commandline.

Tunnel configurations are stored in a simple XML format with support for both local and remote port redirection.

Tunnels can be individually started and stopped from the simple main dialog with the option to add or delete a tunnel or modify its preferences.

An SSH tunnel with port redirection is usefull to access services behind a *nix firewall/router. For example, if you have a Terminal Server (remote desktop) and a MySQL server on your private LAN and want to access them securely from outside, you just open an ssh connection with two port redirections. You can then connect to your localhost which will be redirected over the encrypted tunnel, through the firewall/router, to the remote host.

Very Strange Tunneling Tool (VSST) is a multi-protocol tunneling tool. It accepts input by TCP stream sockets and FIFOs, and can send data via TCP, POP3, and ICMP tunneling.

HOW TO COMPILE

Run the following command:

OS | COMMAND
-----------------------
linux+bsd | make
solaris | make solaris[2]
other unix| try both :-)[1]

[1]: Give me root access to your box and I will port it. Im interested in porting vstt to Solaris x86, Solaris sparc, SGI IRIX, AIX, ...

[2]: Never tested since the hardware of my Solaris box is broken.

HOW TO INSTALL

Run make install

HTTPTunnel is a simple client/server application for creating an HTTP tunnel between two machines, optionally via a Web proxy.
This is a small application for tunnelling an arbitrary TCP socket connection over HTTP. It can be used, for example, to tunnel traffic out from behind a restrictive firewall that only allows outgoing HTTP web connections.
The basic idea is that you run an instance of the HTTP Tunnel application locally in client mode, that then connects out to another instance that you run at the remote end of the tunnel in server mode.
You then connect to the local client end of the tunnel with the application whose traffic you wish to tunnel, and all communications are then wrapped in HTTP. The tunnel may also go via a HTTP proxy, either explicitly or transparently.
Enhancements:
- This release includes some major bugfixes and improvements in the tunneling error detection and retransmission code.
- It also introduces support for building and running under Cygwin.

VTun is the easiest way to create Virtual Tunnels over TCP/IP networks with traffic shaping, compression, and encryption.
In order to compile VTun you need some software packages.
Main features:
- Encryption
- Compression
- Traffic shaping
- VPN
- Mobile IP
- IP tunnel (tun).
- Supports point-to-point IP tunnel.
- Ethernet tunnel (ether).
- Supports all protocols that work over Ethernet: IP,IPX,Appletalk,Bridge,...
- Serial tunnel (tty).
- Supports all protocols that work over serial lines: PPP,SLIP,...
- Pipe tunnel (pipe).
- Supports all programs that works over Unix pipes.
- VTun protocol over TCP.
- Allows to establish tunnels behind firewalls. Very reliable.
- VTun protocol over UDP.
- Fast and efficient protocol with small tunneling overhead.
- Deflate (zlib).
- Very efficient compression. Supported for TCP only.
- LZO (lzo).
- Super fast compression. Supported for UDP and TCP.
- Challenge based authentication.
- No clear text passwords.
- BlowFish 128 bits key.
- Fast efficient encryption with 128 bits MD5 hash keys.