Which firewall to get ?

[Zer0]

+1 for pfsense. Mine runs off a CF card.

pics

[omgwtf]

Since you guys mentioned OpenVPN, I have trouble running it.

Setup OpenVPN on Tomato (firmware) and enjoy secure browsing / access to your network

I followed that guide step by step and everything worked, except the last step where I need to put the IP/dynamic address hostname. I put it save the file, and when I run the OpenVPN Gui it tells me connection failed Options error: Unrecognized option or missing parameter(s) in Home Network.ovpn:1: 24.200.0.1 (2.1.4)


Options error: Unrecognized option or missing parameter(s) in Home Network.ovpn:1: alexmontreal.hopto.org (2.1.4)

Options error: Unrecognized option or missing parameter(s) in Home Network.ovpn:1: 8.23.224.90 (2.1.4)

Options error: Unrecognized option or missing parameter(s) in Home Network.ovpn:1: 208.67.220.220 (2.1.4)

Options error: Unrecognized option or missing parameter(s) in Home Network.ovpn:1: 208.67.222.222 (2.1.4)

[JD]

I would use "TUN" instead of "TAP" and under Advanced, you shouldn't need that Custom Configuration. There should be check boxes for "Push LAN to clients" and "Respond to DNS".

And your .ovpn file should be like:

client
dev tun
nobind
persist-key
persist-tun
secret static.key
comp-lzo
verb 3
remote alexmontreal.hopto.org 1194
proto udp

[omgwtf]

Options error: specify only one of --tls-server, --tls-client, or --secret

[Perineum]

Originally Posted by Zer0

+1 for pfsense. Mine runs off a CF card.

pics

Tell me more, a lot more, about the hardware you're running.

I recognise the case, and the MB looks to be a supermicro.... what processor on that board?

[Zer0]

Originally Posted by Perineum

Tell me more, a lot more, about the hardware you're running.

I recognise the case, and the MB looks to be a supermicro.... what processor on that board?

Case is a MINI-BOX M350 and yes that's a Supermicro X7SPA-HF-D525 which has an Atom cpu.

I mad e a thread on NCIX forums a while back: http://forums.ncix.com/forums/?mode=showthread&forum=191&threadid=2383125&pagenu mber=3&msgcount=71&subpage=1

[Perineum]

danke, sir

[JD]

Originally Posted by omgwtf

Options error: specify only one of --tls-server, --tls-client, or --secret

hmm not sure. I don't use the secret method. I use TLS authentication meaning each device has it's own key/certificate signed against the CA.

[omgwtf]

I got that error after I changed the .ovpn file with your settings.

[omgwtf]

Same Error even after I switched to TLS>

Options error: specify only one of --tls-server, --tls-client, or --secret