From 5be982824d3a20053ed0637397755ff91132a233 Mon Sep 17 00:00:00 2001 From: 4s3ti Date: Sat, 28 Sep 2019 11:18:40 +0200 Subject: [PATCH] Updated FAQ (markdown) --- FAQ.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/FAQ.md b/FAQ.md index 97b9ed0..24ebff7 100644 --- a/FAQ.md +++ b/FAQ.md @@ -18,11 +18,13 @@ Yes. To change the hostname or IP address, you will need to change `/etc/openvpn You will need a dynamic DNS service and a hostname. If your IP address changes, your hostname will then automatically point to the new IP address. Some free dynamic DNS services are or . ## Installing with pi-hole -You can safely install pivpn on the same raspberry pi as your pi-hole install. If you point your openvpn clients to the IP of your pi-hole for DNS (so they get ad blocking etc) then you will want to be sure to edit your /etc/dnsmasq.conf file too allow dns resolution from the vpn interface. -look for this line: `listen-address=127.0.0.1, 192.168.1.2, 10.8.0.1` +You can safely install pivpn on the same raspberry pi as your pi-hole install. If you point your openvpn clients to the IP of your pi-hole for DNS (so they get ad blocking etc) then you will want to be sure you create `/etc/dnsmasq.d/02-pivpn.conf` and add for example: `listen-address=127.0.0.1, 192.168.1.2, 10.8.0.1`a or `interface=tun0` to allow dns resolution from the vpn interface. + Note your listen-address may just contain 127.0.0.1, the next IP should be the local IP of your pi-hole and the final IP, 10.8.0.1 is the PiVPN vpn interface. + If you set this and have your vpn clients use 192.168.1.2 (in my example) as their DNS then you will get ad blocking over your VPN connections. + ## Allow Clients to connect but block their access to the internet If you don't want your VPN clients to be able to access the internet simply comment the following line in `/etc/openvpn/server.con`