User Tools

Site Tools


vpn-rpi4

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revision Both sides next revision
vpn-rpi4 [2020/04/29 21:50]
robm
vpn-rpi4 [2020/04/30 08:59]
robm [ExpressVPN Access Point using a Raspberry Pi 4]
Line 6: Line 6:
     * ''eth0'' (wired) connected to home network:     * ''eth0'' (wired) connected to home network:
       * CIDR: ''192.168.167.0/24''       * CIDR: ''192.168.167.0/24''
 +      * DHCP range: ''192.168.167.100'' to ''192.168.167.250''
       * Gateway / router: ''192.168.167.1''       * Gateway / router: ''192.168.167.1''
  
Line 48: Line 49:
   up   ebtables -t filter -A FORWARD --protocol 0x0800 --ip-protocol UDP --ip-destination-port 67 -j DROP   up   ebtables -t filter -A FORWARD --protocol 0x0800 --ip-protocol UDP --ip-destination-port 67 -j DROP
   down ebtables -t filter -D FORWARD --protocol 0x0800 --ip-protocol UDP --ip-destination-port 67 -j DROP   down ebtables -t filter -D FORWARD --protocol 0x0800 --ip-protocol UDP --ip-destination-port 67 -j DROP
 +
 +  # Ethernet Bridging: Be deaf to DHCP requests originating on the wired
 +  # connection (home network), we are not their DHCP server. (.. and dnsmasq
 +  # cannot distinguish the source, as it all appears to be coming from br0)
 +  up   ebtables -t filter -A INPUT -d FF:FF:FF:ff:ff:ff -i eth0 -j DROP
 +  down ebtables -t filter -D INPUT -d FF:FF:FF:ff:ff:ff -i eth0 -j DROP
  
   # Internet Protocol Network Address Translation when using this bridge, and   # Internet Protocol Network Address Translation when using this bridge, and
Line 62: Line 69:
 sudo apt remove openresolv sudo apt remove openresolv
 sudo apt install dnsmasq hostapd sudo apt install dnsmasq hostapd
 +</code>
 +
 +Remove ''/etc/resolv.conf'' if it is a symbolic link, and recreate as a regular file:
 +<code>
 +nameserver 1.0.0.1
 +nameserver 8.8.4.4
 +nameserver 1.1.1.1
 +nameserver 8.8.8.8
 </code> </code>
  
vpn-rpi4.txt · Last modified: 2021/04/25 20:13 by robm