Active port forwarder uses SSL for secure packet tunneling. It is designed for people without an external IP who want to make some services available on the Internet. afserver is placed on the machine with a publicly accessible address, and afclient is placed on the machine behind a firewall or masquerade. This makes the second machine visible to the Internet. Running afserver does not require root privileges, nor does it use threads or other processes.