I have been running a VPN client on my windows machine in order to access a VPN for downloading. I relied on my PCs firewall to keep the bad guys out while downloading.

 

The VPN provider has 2 service levels - one with NAT firewall, one without. Being the cheap Scotsman that I am, I am looking at using the less expensive option.

 

I am migrating sabnzbd, couchpotato, sickbeard to my recently upgraded unraid box. I have been using a Tomato router (Shibby build) that allows you to route traffic from a single IP address (in my case, the unraid box) via a VPN, while other traffic acts normally and is router to the local ISPs network.

 

The issue is (and this has been discussed here before) that the unprotected VPN puts me in another country with my bytes hanging out. Same as placing your unraid box in the DMZ of your local router.

 

I can see 2 ways around this - pay for the upgraded service level with a NAT firewall... done. Or, find a decent firewall to add to the unraid box.

 

Any thoughts?

 

Cheers,

Brian

 

I'm sure there's a million ways to do this, and a million different ideas.  Putting the total possible combinations to infinity.

 

My first thought would be to create VM used for routing and firewall features.  Not certain IP tables would be sufficient for what you'd be looking to do.  In theory you could route all of your unraid traffic through the VM firewall.  I didn't locate any docker firewall instances.  Shocked something hasn't been published. 

 

There's not a firewall feature set in Tomato?  Would the OpenVPN instance on the Tamato router be an option for you without having to yet another firewall?