Easton's stuff Geek, coding and other madness....

Remote LAN access behind Starlink CGNAT with WireGuard + FRP on FreeBSD

Like any natural geek, I want to access my LAN remotely. If I can't access the hundreds of gigs of pictures of my dog from any device, then this is not a world I want to live in.

Without upgrading to the Starlink Business plan which provides a public IPv4, Starlink uses a CGNAT to share the same IP for a large block of customers. There are consequences to this, such as routinely getting more CAPTCHAs and having your IP blacklisted from some websites (not sure if all Starlink customers are criminals but that's besides the point). The other downside is a home server setup, without resorting to IPv6, and incoming connections to your server.

PPTP server on pfSense

 One of the servers that are at my disposal has a very low CPU usage percentage (if that makes sense). On my way to set up a PPTP VPN server on the box, I realized my router running pfSense could do it out of the box. In this short tutorial, I'll show you how to get a PPTP VPN working so that you can connect to it anywhere.

Head under VPN -> PPTP

Next, click on the Enable PPTP server radio button. For the Server address put in your WAN (public) IP. For the Remote address range, put in a local IP of which the range will start at. Near the end of the page, check Require 128-bit encryption.

Subscribe to vpn