[b]Goal:[/b] DNS server & VPN that can be utilized securely from outside of the network [b]Current software idea:[/b] Raspian Stretch Lite, Pi-Hole, OpenVPN [b]Hardware:[/b] Pi Zero W, Netgear N7000 [b]Home network devices[/b], Win10, Linux, Android [b]Router settings[/b]: static IP for Pi, port forwarding set up to the Pi's IP, DNS server is the Pi's internal IP address [b]My expertise level:[/b] intermediate with networking, advanced with Win10, Linux: on and off have been dabbling with it for 20 years but rather a beginner [b]Initial problem: [/b]VPN only works from home network. Cannot connect from outside. Pportfowarding is set up, OpnVPN is configured based on this detailed guide https://docs.pi-hole.net/guides/vpn/overview but still no success. Should I even bother trying to install OpenVPN on the Pi or just set it up on the router? Pros/Cons? [b]Security Questions:[/b] - what is the weakest link here? - should I run Pi-Hole on and OpenVPN on two separate devices? - how to encrypt the files on linux? - How should I make it secure from any outside attacks? Does it make sense of installing a firewall on the Pi?

[quote=rufus post_id=83105 time=1545593485 user_id=45968] Security Questions: - what is the weakest link here? [/quote]Most often it is the [i]Human element[/i] .. [quote=rufus post_id=83105 time=1545593485 user_id=45968] - should I run Pi-Hole on and OpenVPN on two separate devices? [/quote]No need to, it's up to you .. [quote=rufus post_id=83105 time=1545593485 user_id=45968] - how to encrypt the files on linux? [/quote]You should probably learn how to use [url=https://github.com/OpenVPN/easy-rsa/releases]EasyRSA3[/url] [quote=rufus post_id=83105 time=1545593485 user_id=45968] - How should I make it secure from any outside attacks? Does it make sense of installing a firewall on the Pi? [/quote]OpenVPN is as secure as it is currently possible to be (more or less) .. firewalls are fairly mandatory these days.

I guess your [i]guide[/i] is not very good .. you should take that up with the Author(s).

[quote=TinCanTech post_id=83128 time=1545843679 user_id=37053] I guess your [i]guide[/i] is not very good .. you should take that up with the Author(s). [/quote] then do you have a better one? Do you have any solution, troubleshooting steps, ideas that might help me out?

Setup Issues and Security Quesitons

rufus

Goal: DNS server & VPN that can be utilized securely from outside of the network
Current software idea: Raspian Stretch Lite, Pi-Hole, OpenVPN
Hardware: Pi Zero W, Netgear N7000
Home network devices, Win10, Linux, Android
Router settings: static IP for Pi, port forwarding set up to the Pi's IP, DNS server is the Pi's internal IP address
My expertise level: intermediate with networking, advanced with Win10, Linux: on and off have been dabbling with it for 20 years but rather a beginner

Initial problem: VPN only works from home network. Cannot connect from outside. Pportfowarding is set up, OpnVPN is configured based on this detailed guide https://docs.pi-hole.net/guides/vpn/overview but still no success.

Should I even bother trying to install OpenVPN on the Pi or just set it up on the router? Pros/Cons?

Security Questions:
- what is the weakest link here?
- should I run Pi-Hole on and OpenVPN on two separate devices?
- how to encrypt the files on linux?
- How should I make it secure from any outside attacks? Does it make sense of installing a firewall on the Pi?

TinCanTech

rufus wrote Security Questions:
- what is the weakest link here?

Most often it is the Human element ..

rufus wrote - should I run Pi-Hole on and OpenVPN on two separate devices?

No need to, it's up to you ..

rufus wrote - how to encrypt the files on linux?

You should probably learn how to use EasyRSA3

rufus wrote - How should I make it secure from any outside attacks? Does it make sense of installing a firewall on the Pi?

OpenVPN is as secure as it is currently possible to be (more or less) .. firewalls are fairly mandatory these days.

rufus

Thank you for your responses. I still have no solution regarding this:
Initial problem: VPN only works from home network. Cannot connect from outside. Pportfowarding is set up, OpnVPN is configured based on this detailed guide https://docs.pi-hole.net/guides/vpn/overview but still no success.

any ideas?

TinCanTech

I guess your guide is not very good .. you should take that up with the Author(s).

rufus

TinCanTech wrote I guess your guide is not very good .. you should take that up with the Author(s).

then do you have a better one? Do you have any solution, troubleshooting steps, ideas that might help me out?

TinCanTech

There is a howto somewhere. i think this page has a link:
https://forums.openvpn.net/viewtopic.php?f=30&t=22603