wp.rauchholz
I read quite a bit about openvpn, but still not clear whether I can do with it what I an trying to accomplish....
In short: I want to protect my private home network, increase privacy and stream iptv.
My setup. I do have a homeserver running under CENTOS 7. This server is the modem/router of the network (the router from the ISP is in bridge mode), runs a PPPoE and DDNS client and provides services to the private home network like DNS, DHCP, etc...
Will openvpn provide all this?
Do I need another service like expressVPN for this?
I am okay to purchase an openvpn license if required.
imjebran
Hi,
The OpenVPN server itself can provide you DHCP server upon connection established from outside, the DNS you can push your ISP's DNS IP from OpenVPN server to each client.
Why do you want to buy a commercial VPN service?
Regards,
wp.rauchholz
Thank you for answering my questions.
There are a few reason why I want to setup a VPN; primarily to increase security/anonymity of clients of my private home network. I also access my home network often from outside and want to enjoy secured communication. I believe to understand that openvpn will deliver this.
I want to watch IPTV and need an IP form another country and also want to bypass ISP bandwidth throttling. I thought I would need a commercial service
that has a server in the target country.
Therefor I thought to setup an openvpn service on my linux box and connect it to such a commercial service.
Another question. I work from home office often and my company runs a VPNtoo. If my home server is VPN secured, I would have a VPN connection within VPN tunnel. Is that a problem?
Wolfgang
imjebran
1) You can configure an OpenVPN server in your infra to access your home network via a secure communication channel from outside, but it will not secure your internal network communication to outside.
2) To watch IPTV and bypass ISP bandwidth throttling, You will have to use a commercial VPN service to connect multiple targeted countries.
3) Will not be any problem even you connect to your company's VPN server within current VPN tunnel, The one thing may bother you which is high latency due to multi-hops.
Regards,
wp.rauchholz
Trying now to integrate with the commercial VPN. I don't get routing and (most likely) firewall right
I have 2 NICS
(1) internal network
ifcfg-enp3s0
IPADDR=10.5.2.1
zone=internal
(2) external network
ifcfg-enp6s0
zone=external
ifcfg-ppp0
zone=external
eth=ifcfg-enp6s0
The external firewall is defined as follows:
icmp-block-inversion: no
interfaces: enp6s0 ppp0
sources:
services: http https openvpn
ports: xxx/tcp zzz/tcp aaa/tcp qqq/tcp eee/tcp ggg
protocols:
masquerade: yes
forward-ports:
source-ports:
icmp-blocks:
rich rules:
The openvpn client open s now a new interface tun0.
I added tun0 to external firewall zone, but that did not result in anything.
How do I route the traffic from the internal network through tun0?
What do I need to change on the firewall?
Thanks
