I've been having some trouble on my home network and thought that having a router as an AP would help fix these attacks. At first it did, but now it seems the attackers have gotten through. For all I know, it COULD be a pesky script not necessarily an "Attacker" - just using that term as a general descriptor of a rogue device or worm on my network.

The most obvious signs of outside activity are inbound DHCP connection attempts when using OpenVPN with certain IPs and DNS being switched to an Indonesian server when using certain ports. Some questions along with a basic map of my connection below (using Ethernet):

[MODEM/ROUTER] -> [ROUTER/AP] -> [My Computer]

  • Would using OpenVPN on my router vs computer help deter these types of attacks?

  • Is there any benefit to using two routers vs one to help prevent traffic getting through? Does layering access points help in this situation? I was under the impression a DMZ would help isolate my machine from others... but it could be that I just dont have the DMZ setup strict enough.

  • Would setting up pFSense on a spare computer be more secure vs. using 3rd party firmware on a router? (e.g. Tomato, Gargoyle, OpenWRT, DD-WRT) I figured packages such as DNSCrypt/DNSMasq would help fix the DNS issues described above. I'm not quite sure how to harden DHCP beyond setting it as authoritative, etc.


stackexchange is only suited to one question at a time - you've asked more than one where the title matches a small one at the end, but the rest is 'how do i stop getting dhcp traffic when i'm on a vpn?' by my interpretation.

The answer for that question is to have a firewall on whatever you connect - be it a single host or a router.

There's no objectively good way to assess whether 3rd party firmware is better or worse, since the details matter, but these are moot and only pretty loosely related to your first question. Out of the things you've suggested pfsense is probably the best setup, but only if properly configured, which I kind of get the impression you may not find easy.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.