How to setup affordable VPN to help bypass Internet filtering


by choghok

It is possible to setup VPN servers on a regular PC but PCs are power hungry and keeping them on all the time is bad both for environment and your pocket. Another way is to buy an expensive router with built in support for VPN, but these routers usually cost start from 100-200$ so most of us do not afford them. So what is the solution you may ask? Well there is a speciall open source router firmware called dd-wrt. It fits many of the routers out there and it does also support VPN. These routers usually start from 50$ and are more affordable. So follow the steps below to setup and run the system.

1. Check in the // to see if your router today is supported, if not, then look for one that does and go and buy it from a retailer (I personally use NetGear WNR3500L and it works great).

2. Download Two firmwares, one for initial flash and the second one (if there are several one to choose from) the one including the openvpn or vpn in its name.

3. Log in to your router by giving its intranet address in your internet browser, how to find your routers intranet address is by checking at your PC's internet address (for example if you are and changing the last part of the address (here 21) with 1 (// 

4. first of all flash your router according to your router manual with the initial firmware, then flash it again with the second firmware according to dd-wrt sites howto.

5. Now loggin to your router (the new firmware could have changed the ip address so find its IP again with help of step 3 if needed) and after giving the admin password (I think it is default password is set to admin and user should be empty, if not check the dd-wrt site documentation for default admin username and password), now you are set to configure your vpn server.

6. click on the top right tab called Status now. Make note of the following info (IP-address, DNS1 and DNS2).

7. Follow the steps shown in // Ther Server IP here is the ip address that you noted in previous step. I also added DNS1 and DNS2 from former step here. Remember to choose a bit difficult password and nothing like 123456 or similar, then push the save and then apply button.

8. Now you have setup the VPN server. If you continue to look at the  // you see how the client side of vpn has to be configured. This setup has to be done from where you want to access the VPN, so if you want to access your home network from your company or if you want to bypass filtering from a country where internet connection is limited and censored (China, Iran, Saudi Arabia, e.t.c). The parameters needed here is the server IP mentioned in step 6 and the User name and password that you chosen in step 7. Now connect to the vpn server and voila.

9. If Connecting from Iran and using VPN slows down your internet connection a lot then use the Opera internet browser and turn on its turbo functionality, its speeds up internet connection considerably (look in youtube for opera turbo browsing).


Happy browsing. 


Recently by choghokCommentsDate
Iranian Hiphop festival in Stockholm
Feb 07, 2010
Rally in Stockholm Sweden for Iranian democratic movement
Aug 28, 2009
A second Putin?
Jul 19, 2009
more from choghok

To Mahmoud

by choghok on

I dont see how it is possible to connect to a home network that does not have a public IP? You actually use its public IP to connect dont you? I think also it is better to not have a static IP so it would be difficult to be black listed. If black listed the you can then fetch new IP every time.

Also I think it is not good for your health (and counter productive for your cause) to give racist and islamophobic comments all the time. Donät let IRI extremism make you extremist as well. Wether you like it or not a big part of Iranian (if not a big majority) are practising muslims and will not stop being that even if IRI goes away tomorrow, and behaving like you do would not change that 1 bit but will make yourself more and more hateful.


Thanks - I'll pass it on

by MM on




by mahmoudg on

What needs to also be done is that the home network you are connecting to should be subscripbed to at least one public IP, so it could be used.  of course when that IP is found out, it will be blocked.  But nowadays most home network and business solutions sell you 5 or more IP's.  So by the time the authorities block one you could use another IP address.  They could also block a whole range of them using the same subnet.  But if  few thousand of us start using this method we would have enundated the authorities in Iran and give them whole lot of headache and wasted resource where they could use elswhere and spying and irritating the citizens of Iran.  This in itself is worth it for me.  Although I have VPN set up at home, i shall share that with friends and relatives.  You should also be careful who you give the IP too.  Either it give it those you trust or have an ironclad firewall like sonicwall installed on your server/PC to protect against the Islamic Rapist hackers who would try to infiltate your system.  All in all it is good to waste these Arab moron's time in the Islamic Rapist Republic of Iran.


VPN is standard

by choghok on

Unlike the haystack application VPN is an open standard that is used worldwide for setting up secure connections enabling employees to log in and work in company network from outside. VPN also allows you to access your home network from outside of your home, and that is something that you can use to enable your friend in Iran to use your home network to bypass filters.



Thanks for the info Choghok

by MM on

If you are a computer expert, please keep track of any negative developments and update your blog.  Last year, there was another program called Haystack which was hailed as the ultimate in bypassing IRI's filtering.  But later on, it turned out that there was a serious flaw that gave IRI the information she needed on the bypassers, e.g., see:
Haystack 'anti-censorship' software withdrawn over security concerns