/dev/null /var/Unix /var/Linux / Default Icon

Step 9: Securing the server and enabling forwarding.
Now, we are almost done, so you have a VPN server, all access points are set and working, you can access the “public” WLAN and you can get from your LAN to the VPN network. Theoretically that should be it. Well not exactly, right now your OpenVPN server is wide open, and it even forwards packages to the “public” network. You do not have a route to the public network but return spoofing isn’t rocket science.
So you want to enable IP Forwarding permanently on that server but also make a firewall that allows only connections on port 67 UDP (DHCP), 53 UDP (DNS) and 1194 TCP (OpenVPN). To do this I have made a simple small IPTables script here but for in depth explanation and learning please check the IPTables explained articles series.

Once you have the firewall up and running you are done, you can now connect clients to the Wireless network and to your LAN. You should configure a proxy for public internet access but that is not part of this tutorial. Though this tutorial is pretty in-depth it is not fully 100% complete and you will need to read up on things to understand them better. But this at least should give you a pretty good introduction and get you pretty much 80% there.

Technorati Tags: , , , , , , , , , , ,

Popularity: 58% [?]

Pages: 1 2 3 4 5 6