privateinternetaccess.com sounds like some kind of gimmick for computer illiterate windows users.
In fact it is a well respected and trusted VPN service that has a record of not keeping records and good speed.
The linux support is terrible, but the VPN has really nice features like port forwarding.
They have enormous binary blobs for linux and I didn't want to even try running them.
So today I made a simple solution in 140 line of bash code, that has all of the functionality and convenience of the crappy gui's on windows.
The script will ask for your credentials once, and keep everything in a config file so you don't have to type it in again.
It will change your DNS to PIA to prevent any leaks, and will use ufw to lock down everything so literally nothing can get out or in apart from the VPN, forwarded port, the LAN, and ofc SSH.
If you want to refine the firewall rules further I suggest installing gufw:
apt-get install gufw
It's a gui frontend to ufw, which is a frontend to iptables
It will also add a command to /usr/bin/ to reverse all the changes made.
When you want to get off the VPN just run:
vpnresetI made it super easy to use.
Usage: ./pia [Options]
-u - Update PIA openvpn files before connecting.
-p - Forward a port.
-h - This help.
Note: this is only for users of PIA it will not work with anything else without modification.
Suggestions welcome but I think this is as good as it can get.
Enjoy!
https://github.com/d4rkcat/pia