Hello,
Just had some questions about basic configuration of openvpn server on Ubuntu 12.04 Server. This is a home network of mine, and I have 5 computers on a LAN, 2 wifi mobile devices, 3 wired connections, 3 of which are Linux 12.04 clients, 1 Ubuntu 12.04 Server with x2 NIC's and a Win7 PC.
Trying too determine the best means of which too configure the openvpn server, after reading much of the openvpn Howto, I get the impression routing mode is more beneficial to my network, but I would like too hear other peoples thoughts and opinions on bridged mode.
Secondly, im trying too determine whether it would be beneficial too have a local DNS through bind9 which I currently have running (Linux Box 12.04) in conjunction with openvpn on the same box? Are their any other services I should or should not be running along side openvpn? such as samba or openSSH?
In the openvpn.conf file I have a config that looks like this -
dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
user nobody
group nogroup
server 10.8.0.0 255.255.255.0
persist-key
persist-tun
status /var/log/openvpn-status.log
verb 3
client-to-client
push “redirect-gateway def1″
#set the dns servers
push “dhcp-option DNS 8.8.8.8″
push “dhcp-option DNS 8.8.4.4″
log-append /var/log/openvpn
comp-lzo
Should I configure the push dhcp option DNS, too my local DNS server, the ISP DNS #'s or the google public DNS?
I am currently using the router for DHCP, is it a better idea too run DHCP on the Nix Server or leave it be? (The Nix server is behind the firewall)
The idea of all this is to only host openvpn to my LAN and all the devices/computers connected to it, there by increasing local security, at this point it is not a pressing matter too allow connections inbound from other locations, but rather too encrypt local communication for the outbound connections. Is this a valid means of doing the job?
Thanks for any input.
