What's "unconventional" about panda fisting?

So, basically. Get a cheapo NAT based VPS from here - https://i-83.net
Apparently they've got a Black Friday deal on for 15% off! (code - 15OFFNAT)
As mentioned, I went for the £4.50/year London option.

I installed ubuntu 14.04 lts x64 since it's nice and easy. I imagine the Debian options will be fine too.

I initially followed the instructions here - https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-14-04 - but it didn't work in the end, but it did teach me about most of the settings, which was nice.

I then followed these instructions, which is basically just an automated script - https://quadhost.net/account/knowledgebase/6/Install-OpenVPN-on-a-NAT-Server.html

This worked great first time. One setting I added to /etc/openvpn/server.conf was

duplicate-cn

This means you can use the same client file across multiple devices, saving you from generating a new one for new devices. It will generate a client.ovpn file which you transfer to your devices and load into the openvpn client.


The biggest issue I had when I first rented the server was getting my head around the NAT based port system. It's actually fairly simple. If I read the initial emails that were sent I would have realised that.

The server the VPS is on has an IPv4 IP - this is the external IP
Your VPS has an internal IP - essentially a LAN IP. The port numbers are based off that eg:

External IP
123.123.123.123

Internal IP
192.168.40.50

Your open ports are defined by the last part of the IP "50"
Open ports:
5001-5020
and 5022 for SSH

So 123.123.123.123:5022 would be the SSH port/address for your VPS.

Do you (or anyone) know if it's possible to run vpn on a 'conventional' web server without messing up the latter's ip access to internet/lan via internal router and external dhcp? Thinking of trying it on our work ubuntu 14.04, but not if it nukes it.

The hard part is nailing them to the wagon wheel.

To use the system in question as a an OpenVPN server?

If so, then as far as I can tell everything remains normal. It's only connecting devices/clients that have their network stuff changed for accessing things outside of the LAN. On my laptop and phone all my web traffic seems to go through the VPN and local traffic moves as normal.

I guess with a true business VPN you should be able to get access to that servers internal network from the VPN clients. No idea if I can do that. Probably possible if various interfaces are bridged or something.

Probably need to ask our isp to open port(s), unless it's going through ssh in which case already open.

Nail gun makes pretty short work of it.

You'll just need one spare port, if you don't already have one open.

OpenVPN defaults to 1194

Essential, doesn't help with holding them still though.

Okay, since the topic suggested me about cheap vpn, I found this Purevpn review and got the most cheap yet with extra feature vpn. I am not sure I'll get it this week, I am running low on Nord's subscription but I think I'll buy this one.

Does it support panda fisting?

This guy's been busy keeping this comparison matrix up to date:
https://docs.google.com/spreadsheets/d/1L72gHJ5bTq0Djljz0P-NCAaURrXwsR1MsLpVmAt3bwg/edit

Holy shit, that's a lot of info.

Do you use this and does this provide a dedicated IP addon. 

Most i am concerned is that if it is cheap it might as well be keeping logs.

I was using PureVPN and every time I got the issue about it that's why I want to switch to another VPN in reliable price after searching someone suggests me the article where guide about the best cheap VPN is given after following the guidelines I switch to NordVPN. It's really good cheap VPN.