Hardened Slackware (for desktop user)

rayburn · 03-04-2021, 12:48 AM

Quote:

Originally Posted by rkelsen

Re-reading that, I did omit some details. i.e: The OpenVPN server is a computer at my office (on a business connection), and it is connected to the internet via a router which I control.

Aside from that, the setup is quite simple. The first step is getting the home computer connected to the OpenVPN server in the office. Then it's just a matter of starting a reverse SSH session on the home computer.

The documentation for OpenVPN is very good. I followed that in conjunction with the Slackware wiki page on OpenVPN, which is also very good. Slackware comes with some excellent sample configuration files. Be sure to generate your certificates on a computer which is not connected to your network.

Thank you, that is helpful. I will look into it further.

linuxxer · 03-04-2021, 05:48 AM

Slacker,

Very useful information given by this threads.

slac-in-the-box · 03-04-2021, 10:15 AM

Quote:

Originally Posted by rayburn

how you do that with OpenVPN and reverse SSH, and would be grateful for any relevant links...

This tutorial gets openvpn working. The openvpn setup created additional expense of $5/month for an external Virtual Private Server that can run slackware and openvpn and function as the openvpn server. That way, from your home, your home device initiates outgoing request, allowed by ISP home router's firewall, to external openvpn server, which then assigns tunnels with ip-addresses to your home devices, after which, you can use all the ports on the tunnel, including ssh as the vpn tunnel isn't controlled by your ISP.

Reverse ssh does not incur any additional expense or need for external server. Here is a clear description of reverse ssh (though not slackware targeted so you have to translate aptgets and sytem.d inits to the slackware way).

rayburn · 03-04-2021, 01:35 PM

Quote:

Originally Posted by slac-in-the-box

This tutorial gets openvpn working. The openvpn setup created additional expense of $5/month for an external Virtual Private Server that can run slackware and openvpn and function as the openvpn server. That way, from your home, your home device initiates outgoing request, allowed by ISP home router's firewall, to external openvpn server, which then assigns tunnels with ip-addresses to your home devices, after which, you can use all the ports on the tunnel, including ssh as the vpn tunnel isn't controlled by your ISP.

Reverse ssh does not incur any additional expense or need for external server. Here is a clear description of reverse ssh (though not slackware targeted so you have to translate aptgets and sytem.d inits to the slackware way).

Thanks for those links, they look to be useful. I will investigate this in more depth later.