Hey all.
I'm making a setup as illustrated below. Sorry for the crude drawing. Basically, my goal is to connect the LAN in my parent's home to the LAN in my apartment in order to share files and access each other's servers (they have a CCTV DVR that runs an HTTP server). In addition, I'm planning on using this VPN as a secure tunnel when I'm connected to an unsecure WIFI like in a cafe or hotel.
I'm still planning this out, so I have no configs yet, but I will be using TUN routing and I'll have client-to-client directive enabled. I will also be using the iroute/route to allow machines on server side to communicate with machines on client's subnet.
My concern is security. With this setup, if I connect to the VPN with a smartphone from a WIFI in the cafe, will that give other machines on cafe's subnet access to the machines on the VPN?
+------------------+ +--------------+ +------------+
| Apartment Router |>>>| My PC |<<<| Smartphone |
| 192.168.10.1 | | (VPN Server) | | 10.8.0.4 |
| 192.168.10.0/24 | | 192.168.10.8 | +------------+
+------------------+ | 10.8.0.1 | /\
\/ | 10.8.0.0/24 | /\
\/ +--------------+ /\
+----------+ /\
| Internet |>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
+----------+
/\
/\
+-----------------+ +--------------+
| Parents' Router |>>>| Parent's PC |
| 192.168.20.1 | | (VPN Client) |
| 192.168.20.0/24 | | 192.168.20.5 |
+-----------------+ | 10.8.0.6 |
/\ +--------------+
/\
+----------------+
| HTTP Server |
| 192.168.20.100 |
+----------------+
