I've been having some trouble on my home network and thought that having a router as an AP would help fix these attacks. At first it did, but now it seems the attackers have gotten through. For all I know, it COULD be a pesky script not necessarily an "Attacker" - just using that term as a general descriptor of a rogue device or worm on my network.
The most obvious signs of outside activity are inbound DHCP connection attempts when using OpenVPN with certain IPs and DNS being switched to an Indonesian server when using certain ports. Some questions along with a basic map of my connection below (using Ethernet):
[MODEM/ROUTER] -> [ROUTER/AP] -> [My Computer]
Would using OpenVPN on my router vs computer help deter these types of attacks?
Is there any benefit to using two routers vs one to help prevent traffic getting through? Does layering access points help in this situation? I was under the impression a DMZ would help isolate my machine from others... but it could be that I just dont have the DMZ setup strict enough.
Would setting up pFSense on a spare computer be more secure vs. using 3rd party firmware on a router? (e.g. Tomato, Gargoyle, OpenWRT, DD-WRT) I figured packages such as DNSCrypt/DNSMasq would help fix the DNS issues described above. I'm not quite sure how to harden DHCP beyond setting it as authoritative, etc.