Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


OpenVPN - Local network only
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

OpenVPN - Local network only

MikePTMikePT Moderator, Patron Provider, Veteran

Hi folks,

I need to setup a samba server that will be protected by a VPN. Basically when you install OpenVPN and setup the iptables rules, it connects and starts using the VPN-host's IP.
What I want to do is to setup this but for local area network only, meaning that it won't use the host's public IP. It's just for a LAN access.

How do you guys achieve this?

Comments

  • trewqtrewq Administrator, Patron Provider

    Don't add nat rules to the host. Easy :)

    Thanked by 1MikePT
  • MikePTMikePT Moderator, Patron Provider, Veteran
    edited March 2017

    @trewq said:
    Don't add nat rules to the host. Easy :)

    Yeah I've thought about it, just wondering if it will end up detecting no network access due to that.

    I'll run some tests! :)

    --

    Is there any other software you'd run to achieve this? LAN only?
    I'm setting up OpenVPN with plain text password authentication because the client needs to configure it in several computers. If I do this using certs, it'll be a whole mess.
    There many be other software with simple VPN clients.

  • trewqtrewq Administrator, Patron Provider

    @MikePT said:

    @trewq said:
    Don't add nat rules to the host. Easy :)

    Yeah I've thought about it, just wondering if it will end up detecting no network access due to that.

    I'll run some tests! :)

    You should be right assuming you only advertise the Samba servers IP range route over the VPN.

    Thanked by 1MikePT
  • Bind samba to your vpn private ip (ex to tunO)

    Thanked by 1MikePT
  • MikePTMikePT Moderator, Patron Provider, Veteran

    @trewq said:

    @MikePT said:

    @trewq said:
    Don't add nat rules to the host. Easy :)

    Yeah I've thought about it, just wondering if it will end up detecting no network access due to that.

    I'll run some tests! :)

    You should be right assuming you only advertise the Samba servers IP range route over the VPN.

    That's correct. The samba server will be locked to the local VPN IP's/subnet.

  • MikePTMikePT Moderator, Patron Provider, Veteran

    @sibaper said:

    Bind samba to your vpn private ip (ex to tunO)

    Didn't think about that, but that's pretty accurate and right to do.

    Thanks for your idea!

Sign In or Register to comment.