Hi @ all.

 

I want to create a Linux (let's say Debian, Ubuntu or Arch) VM hosted on my Unraid Server.

This VM is supposed to host a OpenVPN server (no Docker Container) to allow me to access my home network from another location (router doesn't support OpenVPN).

I want OpenVPN to be the only service accessible from the outside (only port 1194 forwarded to the Unraid Linux VM).

 

All traffic should be routed through the VPN (I know how to set this up). The VPN will use TLS certificates + AES-256-CBC (cipher) + SHA512 + the preshared TLS key

 

From a security standpoint:

- Are there things i can do to improve the security (e.g. settings in Unraid itself or it's visualization stack, OpenVPN parameters, ...)

- Is the Unraid Linux VM as secure as a physical machine (any issues with VMs on Unraid which bring along security problems compared to a non VM setup)

- is a software firewall (for example IPtables/UFW in Ubuntu) in addition to the router firewall sensible?

 

 

Thanks for your answers in advance. I hope that's the correct section of the forum and the experts in this community can give me some feedback/advise!

 

- M66F -

I recommend you to take a look at my OpenVPN server plugin before consider a VM

Hi Peter,

 

thanks for your answer! I'll have a look at it. Would you mind answering my questions/look over my setup nevertheless? I would appreciate it!

I would be happy more answers.

 

- M66F -

Push (I hope this is allowed here; didn't find anything in the rules(http://lime-technology.com/forum/index.php?topic=35039.0))

Push

I'm not sure if it's against the rules or not but we don't really forum "bump" / "push" here...