I've installed OpenVPN on a hosted server.
When I travel with my laptop, I want to surf the 'net by connecting via OpenVPN
to that server, making sure that ALL my laptop traffic goes ONLY through the
server, and that it uses the same DNS as the server.
More important though is that I want to make sure that that's limit of the
access the laptop has.
I want to make sure that the connected laptop has NO additional access to
anything on the server. In other words, that it's only using the server as a
gateway to the internet, and that there's NO local access to the server.
My server config is
/etc/openvpn/server.conf
dev tun
local XXX.XXX.XXX.126
management 127.0.0.1 1195
port 443
mode server
proto tcp4-server
bind
topology subnet
server 192.168.1.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS XXX.XXX.XXX.126"
user openvpn
group openvpn
cd /etc/openvpn
chroot /etc/openvpn
script-security 2 system
ccd-exclusive
client-config-dir ccd/
tmp-dir tmp/
ifconfig-pool-persist /var/log/openvpn/ipp.txt
auth-nocache
comp-lzo
connect-retry-max 10
keepalive 3 10
mute 10
persist-key
persist-tun
resolv-retry infinite
verb 3
ca /etc/openvpn/ca.crt
cert /etc/openvpn/vpn.server.crt
key /etc/openvpn/vpn.server.key
tls-auth /etc/openvpn/vpn.server.ta.key 0
dh /etc/openvpn/dh2048.pem
/etc/openvpn/ccd/vpn.roam-client
ifconfig-push 192.168.1.2 255.255.255.0
verify-x509-name vpn.roam-client name
Is that config going to correctly limit access from the roaming client to
anything on the server, only redirecting its traffic out to the 'net?
I think I might be missing something on IP config too -- when it connects to
the server, and then out to the net, what IP address does the laptop get
assigned?
Lani
------------------------------------------------------------------------------
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
