Obviously Metasploit is a powerful tool. However, all Metasploit tutorials that I've seen are based on using Metasploit from within a subnet. I know that nowdays mostly everyone has some sort of router at home, be it wireless or wired, or piggybacked into the modem. From a IPSec standpoint, is it possible to exploit something into a network from outside of the network? I don't have too many nice neighbors or I'd setup a box in their house and try it. Obviously there are going to be some port issues, and logically the router would choose the first candidate. What if I was trying to access a certain computer on that network? I'm just not sure of how I could specify that ex. 192.168.1.105 is the target (from outside of the network), without first being 'apart' of that pertaining network. So if I were trying to prove to a boss that he needed some sort of hardware firewall, how would I show him on the computer that he's sitting at? Sorry to be so broad. Maybe I need to touch up on my theory of WANs.