non-d3ck client VPN... need additional info/alerts/etc.

[zenfish]

You can easily generate tokens a computer can use to connect to your d3ck and have it act as a basic OpenVPN server. A few things, depending on paranoia level, should be thought about -

• logging... currently no logging is done except in the basic VPN logs - this is out-of-d3ck comm, after all. It'd be nifty to have at least something in the d3ck logs, and possibly in the UI as an alert.
• if auto-port blocking is used, the VPN port will be blocked unless a request asks for it. You'll want to WARN USER that they need to something like an anon-vpn capability enabled for this to work, as you can't do a d3ck knock-knock unless you know the d3ck's protocols.