VPN Primer for Noobs

Discussion in 'IP Cameras' started by nayr, Nov 6, 2016.

Share This Page

?

What VPN Solution are you using?

  1. OpenVPN

    61.7%
  2. IPSec/L2TP

    13.0%
  3. on an OEM Asus Router

    15.0%
  4. on a WRT flashed Router

    7.1%
  5. on a pfSense Router

    7.5%
  6. on my PC NVR (BlueIris, Milestone, etc)

    4.9%
  7. on a dedicated device (Raspbery Pi, VPN Concentrator, etc)

    4.5%
  8. ssh tunnels are the only way to roll

    1.3%
  9. on my NAS (Synology, FreeNAS, etc)

    5.3%
  10. on a OEM Netgear Router

    6.4%
Multiple votes are allowed.
  1. DavidDavid

    DavidDavid Pulling my weight

    Joined:
    Jan 29, 2017
    Messages:
    584
    Likes Received:
    236
    Location:
    Ohio
    Yea I'm not so sure about TeamViewer. I tried setting up nomachine on my parents laptops to help them with computer issues but for some reason it couldn't configure their router on its own to access over the Internet. TeamViewer had no issues doing that. That's when I decided to buy them a $10 router from Craigslist, install dd-wrt and set it up as a VPN server. The tax document transfer in my case is just a bonus for using a secure VPN. For minor computer issues in the mean time I'll still use TeamViewer just because it's working.
     
  2. nayr

    nayr IPCT Contributor

    Joined:
    Jul 16, 2014
    Messages:
    9,347
    Likes Received:
    5,237
    Location:
    Denver, CO
    might set yer mom up with a PGP Mail Addon and a key, then you can send files/data back and forth securely over public systems.
     
  3. DavidDavid

    DavidDavid Pulling my weight

    Joined:
    Jan 29, 2017
    Messages:
    584
    Likes Received:
    236
    Location:
    Ohio
    Ha, thanks. Don't know what that is or that even existed as an option, but maybe I'll look into it just to see what it's about.

    The primary goal for me was to remote into their computers to help them out with whatever issues they may have, so a secure remote desktop control is my primary goal. The secure transfer of files is like a bonus.

    Although even though they only live 1.5 hrs away I probably already don't visit them enough and could use extra reasons to get down there.

    For example my mom just got a new laptop. Well, until she was able to get all of her tax programs and documents moved over to the new computer, she was putting files on flash drives, then moving over to old laptop to print. Then she figured out that she could just move the printer cable between computers and print like that. Sigh... I figured out she has a Ethernet port in the back of the printer so my last trip down there was to get that on their network so they could all print easily. (my dad's laptop printed thru the shared printer from her old laptop, so if she had hers out of town he couldn't print. Thanks Geeks quad. I wasn't about to let them take another $99 from them for hooking their printer up to the new laptop in such a shitty configuration. She's got a heavy duty printer since she works at home)

    They're always amazed at what I can do to fix their computer/phone issues. What's the saying? You only have to be the smartest person in the room to be labeled an expert? I am certainly no network/computer expert and Luckily they have easy issues to resolve Haha.
     
  4. tb10818

    tb10818 Young grasshopper

    Joined:
    Dec 24, 2016
    Messages:
    48
    Likes Received:
    17
    Lol daviddavid. I've discovered that even if I know how to fix a tech problem for someone (which is often) its best to keep my mouth shut. Otherwise I'm doing a bunch of free work heh
     
  5. nbstl68

    nbstl68 Getting comfortable

    Joined:
    Dec 15, 2015
    Messages:
    1,121
    Likes Received:
    177
    After all the stuff that has just come out about CIA \ NSA hacking tools being able to basically access everything at any time...you think there really is any secure transfer of data that cannot be monitored?...and probably more easily than we know.

    I'm safe though...All my communications have been flagged as so boring the CIA said they added me to their block list. o_O
     
  6. DavidDavid

    DavidDavid Pulling my weight

    Joined:
    Jan 29, 2017
    Messages:
    584
    Likes Received:
    236
    Location:
    Ohio

    Hey, if the government intercepts my tax documents then it'll save us the hassle of filing them!
     
  7. slowhandfan

    slowhandfan n3wb

    Joined:
    Jan 23, 2017
    Messages:
    8
    Likes Received:
    0
    Thanks for this primer! I have both BI and OpenVPN set up on a dedicated desktop PC and have successfully accessed my Blue Iris webserver from my Android phone thru my cell provider network.

    Can you all suggest the best way to remote in to the OpenVPN / BI server. I've used Teamviewer in the past to help family with PC issues, but part of installing OpenVPN was to have a more secure remote access. I'm looking to be able to use my VPN to remote control desktop, do file transfers, etc from both Android and windows PCs. And have to stick with TUN as I understand Android doesn't support TAP I believe.
     
  8. nayr

    nayr IPCT Contributor

    Joined:
    Jul 16, 2014
    Messages:
    9,347
    Likes Received:
    5,237
    Location:
    Denver, CO
    just use the built in Remote Desktop functionality
     
    slowhandfan likes this.
  9. slowhandfan

    slowhandfan n3wb

    Joined:
    Jan 23, 2017
    Messages:
    8
    Likes Received:
    0
    Thanks @nayr, I've used that before but didn't know if there was a better option.

    I also want to be sure I haven't created any problems on my network. I ran GRC Shields up and all ports are stealthed, no port forwards on my router except for OpenVPN. I was also thinking I should block outgoing traffic on my cameras to avoid them being used by hackers, does that make sense to do? Any other suggestions / tools to check my network? Really appreciate the help!
     
  10. nayr

    nayr IPCT Contributor

    Joined:
    Jul 16, 2014
    Messages:
    9,347
    Likes Received:
    5,237
    Location:
    Denver, CO
    Block your cameras from reaching the internet by all means, however you might have issues with emails and timesync if you dont run those services your self locally.
     
    slowhandfan likes this.
  11. slowhandfan

    slowhandfan n3wb

    Joined:
    Jan 23, 2017
    Messages:
    8
    Likes Received:
    0
    OK, I don't run my own email or timesync, will have to think about that and do some research. Want to be a good net citizen as far as my limited networking skills will allow.
     
  12. PSPCommOp

    PSPCommOp Getting the hang of it

    Joined:
    Jun 17, 2016
    Messages:
    694
    Likes Received:
    87
    Location:
    Northeastern PA
    @nayr, is it possible (or smart) to set your router NTP to the NTP server on our BI machine if we have one running? Or is it better to have it sync to an outside NTP?


    Sent from my iPhone using Tapatalk
     
  13. nayr

    nayr IPCT Contributor

    Joined:
    Jul 16, 2014
    Messages:
    9,347
    Likes Received:
    5,237
    Location:
    Denver, CO
    sync it from your local network, then you'll recover time after an outage if the internet is gone.. doubtfull your router has a battery backed up RTC
     
  14. vegaslineman

    vegaslineman n3wb

    Joined:
    Feb 10, 2017
    Messages:
    16
    Likes Received:
    4
  15. TL1096r

    TL1096r Pulling my weight

    Joined:
    Jan 28, 2017
    Messages:
    544
    Likes Received:
    104
  16. DavidDavid

    DavidDavid Pulling my weight

    Joined:
    Jan 29, 2017
    Messages:
    584
    Likes Received:
    236
    Location:
    Ohio
  17. wantafastz28

    wantafastz28 Getting comfortable

    Joined:
    Nov 18, 2016
    Messages:
    536
    Likes Received:
    250
    Location:
    Phoenix, az
  18. PSPCommOp

    PSPCommOp Getting the hang of it

    Joined:
    Jun 17, 2016
    Messages:
    694
    Likes Received:
    87
    Location:
    Northeastern PA
    Open VPN Connect on my android tablet


    Sent from my iPhone using Tapatalk
     
  19. motoolfan

    motoolfan Getting the hang of it

    Joined:
    Apr 3, 2015
    Messages:
    59
    Likes Received:
    25
    Location:
    Sedalia MO
    Open VPN Connect as well, on Android and IOS
     
  20. Jack B Nimble

    Jack B Nimble Pulling my weight

    Joined:
    Dec 15, 2015
    Messages:
    878
    Likes Received:
    104
    Location:
    Great White North
    At least Openvpn wasn't listed which I use as well.