Nytro Posted November 25, 2015 Report Posted November 25, 2015 OpenVPN for paranoidsTue 17 November 2015By Victor DorneanuContinuing my admin series this time I'd like to setup a VPN using OpenVPN as user-based VPN solution. Unlike IPSec solutions which require IPSec on both (server and client) sides, securing the VPN tunnel by OpenSSL is a more preferable option.In this post I'll try to show which steps have to be taken in order to:secure the communication channeluse up-to-date (and secure!) TLS configurationsprevent information leaks when the VPN tunnel is downAt least for the last one some additional steps are required to route your traffic only through the VPN tunnel. As a client you don't want your connection to be "downgraded" (in terms of security) without even realizing it. That's why you might want to restrict your routes and allow outbound connection only through the (virtual) interface dedicated to the VPN. How this is done and which methods exist, is covered later on.Articol complet: OpenVPN for paranoids - blog.dornea.nu Quote
