On Fri, Oct 05, 2012 at 08:58:12PM +0100, Keith Edmunds wrote:
On Fri, 5 Oct 2012 11:24:29 +0100, cl@isbd.net said:
If I then run an OpenVPN client on the system on the boat will I be able to do what I want:-
1 - Run the OpenVPN client on the boat without user intervention?It's a minimal Ubuntu server installation, no GUI, little space, etc.
Yes.
2 - Having done 1 can I then access the *client* from the server?Yes.
3 - security of the client system is unimportant really, if someone hacks into it and takes it completely apart I don't really care,however security of my home system *is* more important.
Not a problem (at least, not one that can't be solved).
Make your home system an OpenVPN server. The simple option is to create a certificate for OpenVPN and set up the boat to connect to home. The security at home is that no one without the certificate can connect.
Yes, but the boat system isn't secure. So, if someone gains access (physical or virtual) they will have the certificate to connect to my home system. That's exactly why I don't allow direct access using ssh from the boat to my home system.