OpenVPN: Easy and Secure Setup Guide
Steven Roddis
2010-01-06

Intended Audience:

Everyone with basic computer knowledge: editing files, use of a SFTP client like FileZilla, transferring files, should be comfortable with Windows and have a little network experience.

What is a VPN

A VPN allows secure access to resources inside a firewall, it also allows you to secure all your traffic and make it pass out of a server you trust, preventing snooping on your traffic. This is good at a cafe where you don't trust (nor should you) the network.

Request for Comments:

This guide is a work in progress, if it was too much text or not enough let me know. If you are having troubles let me know and I'll try help you out. :) This will …ver más…

Prevent ARP Spoofing and DHCP Hijacking

You can read up on what ARP Spoofing and DHCP Hijacking which are in the advanced stuff section at the end of this guide. To do this we are going to set a static IP along with static gateway and DNS entries and add static arp entries.

Static IP and Gateway

sudo nano /etc/network/interfaces

If you are using DHCP for your primary network card which is usually eth0, you will see the following lines auto eth0 iface eth0 inet dhcp It's probably using DHCP right now, if not you can skip this step. Change the above two lines to these seven. auto eth0 iface eth0 inet static address 192.168.2.22 #replace with your server's (the machine your are working on) IP netmask 255.255.255.0 network 192.168.2.0 #If your gateway (router) IP is X.Y.Z.A replace this with X.Y.Z.0 broadcast 192.168.2.255 #If your gateway IP is X.Y.Z.A replace this with X.Y.Z.255 gateway 192.168.2.254 #replace with your gateway IP Restart the networking service using the following command Press CTRL-O and ENTER to save and CTRL-X to exit.

Static DNS

sudo nano /etc/resolv.conf Edit this file to contain your dns servers: Example: nameserver 208.67.222.222