Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005: ____________________________________________ Part two of Building an OpenVPN access point, this time on Hak5. ------------------------------- Shop: null Support: http://www.patreon.com/threatwire Subscribe: null Our Site: http://www.hak5.org/ Contact Us: http://www.twitter.com/hak5 ------------------------------ Recap: We've been building an VPN WiFi hotspot using OpenWRT and OpenVPN. Last week we setup the OpenVPN Access Server and setup user accounts. Today we're going to work on the access-point side of things in OpenWRT by setting up the openvpn client, configuring the IP routing and testing the connection with WiFi devices. SCP client.opvn to pineapple SSH to pineapple Get pineapple online opkg update opkg install openvpn-openssl route openvpn client.ovpn route #Setup forwarding for clients iptables -t nat -A POSTROUTING -s 172.16.42.0/24 -o tun0 -j MASQUERADE iptables -A FORWARD -s 172.16.42.0/24 -o tun0 -j ACCEPT iptables -A FORWARD -d 172.16.42.0/24 -m state --state ESTABLISHED,RELATED -i tun0 -j ACCEPT #demo clients Test connection apt-get update apt-get install php5-cli ~-~~-~~~-~~-~ Please watch: "Bash Bunny Primer - Hak5 2225" https://www.youtube.com/watch?v=8j6hrjSrJaM ~-~~-~~~-~~-~ ____________________________________________ Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.