There is a VDS hosting a Debian system and the desire to establish a VPN connection on it for protection against sniffing in open WiFi networks. The envisioned scenario is connecting to a public WiFi network using clients like Android 2.2, iOS 4, or Windows 7, and then connecting to a VPN where all traffic will be encrypted and transmitted through it.

As such, the task at hand is to choose and configure a VPN that can be connected to by popular clients like Win, iOS, and Android.

* *

For Android, there are several available configurations such as pptp, l2tp, l2tp/IPsec PPTP, l2tp/IPsec CRT.

iOS supports L2TP, PPTP, and Cisco IPsec VPN.

On Windows, a standard client (or something similar) can be used.

Up to four clients can be connected simultaneously, and the VPN setup scheme involves using a router with login/password access.

Alternatively, a PPTP server with configured forwarding can also be considered.

OpenVPN would still be my top choice, having used it for an extended period of time. It features clients for both iPhone (such as www.guizmovpn.com) and Android, and supports working via NAT and http/socks proxy.

While I am unsure about its compatibility with other devices, setting up OpenVPN is relatively easy and straightforward.

PPTP is definitely the way to go if you want a hassle-free VPN experience. However, it comes with several limitations, including the inability to change the standard connection port in most cases.

For a more dependable solution, OpenVPN is ideal. Even though I had no prior experience with routing, I was able to quickly set it up on my home VPS (Debian) with a bit of tinkering. The best part is that it works exceptionally well and without any interruption, making it a reliable VPN option.

The quickest and simplest VPN option is PPTP. For freebsd, setting it up involves using the mpd daemon, copying and pasting mpd.conf.example, and adding login and password lines to mpd.secret.

However, PPTP uses GRE which can be cut in some instances. For a more modern and reliable solution, L2TP over IPsec is suitable, despite being slightly more complicated (as it involves two separate processes unrelated to each other). It works flawlessly 99% of the time.

To create our very own VPN, we would need a virtual private server (VPS) from a provider based in a neutral jurisdiction.

One feasible option is PQ.HOSTING which offers a company based in a relatively neutral jurisdiction and with servers located in over 15 different locations across various continents. Their service provides fast registration and multiple payment methods including cryptocurrencies, MIR cards, online banking and payments made via mobile phone. Additionally, the company offers a paid service to set up VPN for clients if necessary.

For our VPN, all we have to do is order a VPS with the minimum configuration for the specific location - 1 vCore, 1GB RAM, 15GB NVMe, 1Gbps. However, if the server is intended to serve a larger number of clients or for other purposes, it would be best to select a more powerful configuration.

Upon placing an order, we can specify the location of the VPS datacenter along with Ubuntu 20.04 or Debian 10 operating system. After payment, the necessary server access data including IP address and root password will be provided.

Step 2 involves installing and connecting to VPN by using a free open source VPN client. This client is available for various platforms such as Windows, macOS and Android. However, alternative clients are available for Linux and iOS.

When initiating the VPN client, "Set up your own server" must be selected, following which the server access information (IP address and root password) will be entered. Then, selecting "Run Set-up Wizard", we can proceed with the installation of the VPN. At the stage of selecting the censorship level, it is recommended to select "Low censorship" in order to install OpenVPN. However, other supported protocols can be enabled later, if required.

Once the client connects to the server, the necessary software will be installed within a few minutes, allowing us to use our VPN.

For Windows users, in the absence of a TAP driver, the OpenVPN installation in selective mode can be run or the driver can be downloaded separately. Additionally, users may see a message indicating not enough VCRUNTIME140_1.dll, which can be resolved by installing the Visual C++ component.

Other devices can also be connected to the VPN client via a ready-made configuration file .vpn for quick import of settings, or a universal configuration file .ovpn for use on alternative OpenVPN clients. Routers with built-in OpenVPN support can also be connected via the same process and ASUS routers have the direct import functionality of configuration files .ovpn.

I would recommend setting up an OpenVPN server on the Debian VDS for secure and encrypted VPN connections. OpenVPN is widely supported across various platforms including Android, iOS, and Windows, making it an ideal choice for this scenario.
To begin, we would need to install and configure the OpenVPN server on the Debian system. We can generate the necessary certificates and keys for authentication and encryption using the easy-rsa tool provided with OpenVPN. The server configuration file will define the VPN subnet, authentication method, and other options.

For Android clients, OpenVPN offers dedicated client apps that can be easily configured to connect to the server. These apps provide a user-friendly interface for importing the necessary configuration and credentials.

iOS devices can also connect to the OpenVPN server using third-party apps available on the App Store. These apps support L2TP and PPTP, making it convenient for iOS users to establish VPN connections.

Windows has built-in support for OpenVPN connections using the OpenVPN GUI client. This client provides a straightforward method for importing the server configurations and connecting to the VPN.

With OpenVPN, we can configure the server to allow up to four simultaneous connections, meeting the requirement for multiple clients to connect at the same time. Additionally, we can implement user authentication and access control using login/password access or by integrating with existing authentication systems.
By opting for OpenVPN, we ensure that all traffic from the clients will be encrypted and transmitted securely through the VPN, providing protection against sniffing in open WiFi networks. With its robust security features and cross-platform support, OpenVPN is an excellent choice for establishing a reliable VPN solution for the given scenario.

Streamline your digital fortress! Configuring a VPN for multiple devices ensures seamless protection across your network. Stay secure, surf freely, and safeguard every connection with ease and efficiency.

Quote from: donamiller90 on Feb 27, 2023, 07:25 AMThere is a VDS hosting a Debian system and the desire to establish a VPN connection on it for protection against sniffing in open WiFi networks. The envisioned scenario is connecting to a public WiFi network using clients like Android 2.2, iOS 4, or Windows 7, and then connecting to a VPN where all traffic will be encrypted and transmitted through it.

As such, the task at hand is to choose and configure a VPN that can be connected to by popular clients like Win, iOS, and Android.

* *

For Android, there are several available configurations such as pptp, l2tp, l2tp/IPsec PPTP, l2tp/IPsec CRT.

iOS supports L2TP, PPTP, and Cisco IPsec VPN.

On Windows, a standard client (or something similar) can be used.

Up to four clients can be connected simultaneously, and the VPN setup scheme involves using a router with login/password access.

Alternatively, a PPTP server with configured forwarding can also be considered.

Offers better security than PPTP but requires additional setup on the client-side (certificates or pre-shared keys). Both iOS and Windows can handle this, but some older Android versions (like 2.2) might have limitations.

Quote from: donamiller90 on Feb 27, 2023, 07:25 AMThere is a VDS hosting a Debian system and the desire to establish a VPN connection on it for protection against sniffing in open WiFi networks. The envisioned scenario is connecting to a public WiFi network using clients like Android 2.2, iOS 4, or Windows 7, and then connecting to a VPN where all traffic will be encrypted and transmitted through it.

As such, the task at hand is to choose and configure a VPN that can be connected to by popular clients like Win, iOS, and Android.

* *

For Android, there are several available configurations such as pptp, l2tp, l2tp/IPsec PPTP, l2tp/IPsec CRT.

iOS supports L2TP, PPTP, and Cisco IPsec VPN.

On Windows, a standard client (or something similar) can be used.

Up to four clients can be connected simultaneously, and the VPN setup scheme involves using a router with login/password access.

Alternatively, a PPTP server with configured forwarding can also be considered.

Start by installing the necessary VPN server software on your Debian system. For L2TP/IPsec, you can use packages like strongswan or libreswan. You can install StrongSwan using the following command:
sql
Copy code
sudo apt update
sudo apt install strongswan