Question on LAN security Linux

[Guest]

Hi there,

I am totally new to vpn and I just curious about how that all works and how to do it right, and now I am quite confused about thousand different setup methods.

 

I have a plain linux box which runs a service Y on a specific port that shall go throught airvpn.

So far I only read that once openvpn is started all traffic goes through the vpn.

 

If I simply start the vpn as descibed here

https://airvpn.org/topic/11431-using-airvpn-with-linux-from-terminal/

 

on the box does this mean that everyone on the other side of the vpn can portscan/connect to services that

are running on that box?

 

If I manage that box from another client in my LAN via a vncserver that is installed on that box, can I still reach the box after starting openvpn and can anyone on the other vpn side connect to the vncserver?

 

So my question is what is the easyest way to route only service Y to the vpn and make incomming (from the vpn) request route only to service Y's port?

 

[Guest]

Ok I just read that by default all incomming ports on the vpn are blocked. So I dont worry anymore about that someone tries to portscann me.

[John Gow 17]

The netlock feature of AirVPN I think is one of its biggest selling points. It really, really locks things down. On the down side (sort of), if you're trying to do something new with your router, you don't know if you're going to be messing up AirVPN or vice versa, in the case you would like to try VLAN isolation or bridging, or remote port forwarding, which I have still had trouble getting to work properly. Theres's nobody who can really help you exactly, since your system and your needs are so unique as all of ours are, and people don't really know how to integrate airvpn into whatever it is you're trying to do necessarily. So it's been very touch and go for me on that front. Just keep network lock on the moment your LAN goes live. It should be noted that it can't protect you from LAN-side attacks, but this is mostly a problem with people who have wireless, bluetooth and IoT devices like Roku and other garbage.