The way I did this between two sites was to use the ssh-ip-tunnel
package.  This way, you get the data encrypted when it goes over the
internet (or @home's backbone in your case).

It works great, especially because one of my gateway machines is still
running 1.3.2 and doesn't have ipip or gre tunneling.

> I have a need for an IP over IP tunnel which has no intermediate machines.

--Brian;