I have some friends staying in United Arab Emirates and I would like them to enjoy uncensored Internet without paying so I was thinking of setting up my own mini VPN server, just like the commercial services Relakks and Strong VPN... (VNP service websites are blocked in UAE so it's even hard to subscribe to a commercial service)
1. Is Kerio WinRoute Firewall an option? (through my work I got a valid licence that is not in use)
2. I will be running a non server OS. Either Vista or Windows 7.
3. I would like my users to be able to create their own VPN connection using the built in PPTP in Windows rather than third party software (using "setting up a connection to your workplace" wizzard) if possible. I know Kerio is using a software client, it's fine.
4. I would like each user to have their own username and password.
5. I will be using DynDNS since don't have a fixed IP.
In other words, the user shall not have any access to my computer files at all. The server shall just forward my friends Internet traffic. No limits on protocols what so ever but caping the users bandwidth somewhat is desirable at certain times.
If you know of any tutorials please post the links here, or if you have any tips and ideas on this matter it would very much appreciated.
Laptop running Windows 7, 3GHz CPU, 2GB memory, 320GB HD. Laptop is right now using the wireless network to access the Internet through a router.
Laptop has a fixed IP address on the internal network.
Router firewall is off.
Router is using DHCP.
I have a 100/50Mbit connection.
Just to give you an idea how bad the situation is in UAE (and in the region in general):
They (Etisalat, the main ISP) ) block all xxx sites, Skype communication and other IP telephony service, all type of proxy websites and VPN services, a lot of computer security forums, dating websites, certain business forums, alot of p2p sites, put cap on torrent traffic and anti government or regime critic websites are totally banned etc. etc.... the list is long...
I had a www proxy set up during the demonstrations in Tehran, Iran and I posted my the details on certain forums. It was amazing to see the amount of traffic flowing through my little laptop. In 3 days my connection served several hundreds of people and gave people who are struggling for freedom a chance to express them self without the risk of being censored.
I don't wanna put my users in danger and therefore I wanna go full 128bit encrypted VPN. That will put an end to government monitoring for good. Plus me using dynamic DNS is better than a fixed one. If they block my address I just set up a new one and tell my users.
I urge everyone else to do the same thing I do. If you have the bandwidth to do so. There are so many people in the world who are silenced by their so called leaders. Hopefully this will make some change to the better...
So back to the issue... I have no experience of setting up a VPN server and forwarding traffic to the Internet. I just need some help configuring it correctly.
I guess my experiment can seam a bit amateurish but hopefully it will work for my close crowd. Right now I'm on wireless at home. I've understood that you need two network cards to make this work. So my guess is that I have to configure the server to work with my Ethernet NIC and a cable connected to the router.
P.s I've tried Open VPN but I can't modify the routing tables on my router since my ISP provided box doesn't support that. Therefore I couldn't make it work.
[Updated on: Mon, 31 August 2009 02:04]
Kerio discussion forums are intended for open communication between forum
members and may contain information and material posted by members which may
be useful in learning about Kerio products. The discussion forums are not
intended to provide technical support for any specific product. Any
information implied or expressed in the discussion forums is that of the
posting member. Kerio is in no way responsible for the information posted in
the forums, or its accuracy. Kerio employees may participate in the
discussions, but their postings do not represent an offical position of the
company on any issues raised or discussed. Kerio reserves the right to
monitor and maintain the forums to promote free and accurate exchange of