[App_rpt-users] VPN for node behind NAT?

[Stephen - K1LNX]

If you need a firewall, just use good 'ol iptables or a package called
Shorewall, both deliver good results. I am not a fan of UFW, as I found it
to be counter-productive.

Here's a good generator for iptables rules:

http://www.mista.nu/iptables/

What I do is drop these into a script and call it at startup.

73
Stephen
K1LNX


On Fri, Aug 5, 2016 at 3:34 PM, Tom Hayward <tom at tomh.us> wrote:

> On Fri, Aug 5, 2016 at 11:58 AM, Tom Hayward <tom at tomh.us> wrote:
> > On Fri, Aug 5, 2016 at 11:50 AM, Steve Agee <n5zua at earthlink.net> wrote:
> >> Has anyone made any notes or videos on how to install and configure both
> >> ends of OpenVPN, or is it "so easy, even an idiot can do it"?
> >>
> >> N5ZUA
> >
> > I'm working through this tutorial now:
> > https://www.digitalocean.com/community/tutorials/how-to-
> set-up-an-openvpn-server-on-ubuntu-14-04
> >
> > DigitalOcean usually has quality, generic tutorials for things like
> > this. So far, all of the commands and package names have been 100%
> > compatible with DIAL.
>
> Okay, not completely true. I ignored the whole section on ufw, because
> DIAL doesn't have ufw. Also, when you get to the point of starting the
> service, rather than service openvpn start, the command on DIAL is:
>
> systemctl start openvpn at server.service
>
> This assumes your config file is /etc/openvpn/server.conf. For
> /etc/openvpn/xxx.conf, you would do systemctl start
> openvpn at xxx.service.
>
>
> Tom KD7LXL
> _______________________________________________
> App_rpt-users mailing list
> App_rpt-users at ohnosec.org
> http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users
>
> To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/
> mailman/listinfo/app_rpt-users and scroll down to the bottom of the page.
> Enter your email address and press the "Unsubscribe or edit options button"
> You do not need a password to unsubscribe, you can do it via email
> confirmation. If you have trouble unsubscribing, please send a message to
> the list detailing the problem.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.keekles.org/pipermail/app_rpt-users/attachments/20160805/1e97e838/attachment.html>