1
vote
1answer
21 views

OpeVPN log connecting client IPs

I looking for the best solution to log all connecting client's ip to either a text file or a database who logs into my VPN server. Under the IP I mean the public WAN IP on the internet where they are ...
1
vote
1answer
230 views

Pros / cons of using password-less OpenVPN client keys

I'm setting up an OpenVPN server for my organization, and I'm reading up on the different ways that the client side keys work. I'm still a little unfamiliar with all of the concepts behind these ...
0
votes
1answer
63 views

OpenVPN and Performance [closed]

From my understanding RDP is encrypted and so is the OpenVPN connection so that is an encryption in an encryption. My Setup: LAPTOP <---> REMOTE SERVER <---> OFFICE SYSTEM Due to ...
0
votes
1answer
45 views

Login to openvpn web GUI after change IP

My provider just changed my IP address. How can I login to my web GUI with my new IP address? Thanks in advance.
1
vote
0answers
72 views

What's the meaning of “\x38\x01\x00\x00\x00\x00\x00\x00\x00” in openvpn connection using netcat?

I am testing my openvpn server by netcat, and I found this answer: How to check that an OpenVPN server is listening on a remote port without using OpenVPN client? by send a magic string ...
2
votes
1answer
2k views

OpenVPN daemon fails to start — starting server manually returns no output

I am setting up an openvpn server on my network for the purposes of accessing devices remotely. I have generated crts and keys with the easy-rsa scripts and have configured server.conf correctly ...
0
votes
1answer
878 views

Where to put OpenVPN server - DMZ or LAN?

We have a Smoothwall firewall with both a "green" network (LAN) and an "orange" network (DMZ), and we would like to use OpenVPN access server as our VPN server. The question is: Should the VPN server ...
-2
votes
1answer
135 views

Is a VPN a good method for protecting data in an untrusted network? [closed]

I will be connecting my laptop in an untrusted network. If I setup OpenVpn on a server and use a vpn client on the laptop to connect through it, is it enough? Can someone perform a MITM attack or ...
2
votes
2answers
2k views

OpenVPN bad source address from client

I have one problem with OpenVPN. There are a lot drops records in the openvpn log file on the server: Mon Oct 22 10:14:41 2012 us=726541 laptop/ххх:1194 MULTI: bad source address from client ...
2
votes
0answers
28 views

OpenVPN bad source address from client [duplicate]

Possible Duplicate: OpenVPN bad source address from client I have one problem with OpenVPN. There are a lot drops records in the openvpn log file on the server: Mon Oct 22 10:14:41 2012 ...
2
votes
1answer
452 views

Host network injecting resets into my TCP connection?

I'm trying to figure out whether the host network I am on is injecting TCP Resets into my VPN connection. I have a personal OpenVPN server, and recently my attempts to connect over TCP port 1194 have ...
1
vote
2answers
86 views

adding another security layer on top of openvpn

I've set up a VPS that handles mail, files, jabber, etc. All these services are available only to the local network that OpenVPN creates. For example all of the services will only listen on the ...
1
vote
1answer
60 views

multi-purpose server - security

running ubuntu server 10.04. This box is both a web (apache2) and vpn (openvpn) server. Here is how the network is currently configured. router 192.168.1.1 | | LAN | | ubuntu server 192.168.1.2 NAS ...
0
votes
2answers
345 views

How to use a shared key and certificate for all users with OpenVPN?

I have an OpenVPN server which authenticates to an Active Directory and asks therefore each user for a username and passphrase. On top of that it also requires each user to have a client certificate ...
2
votes
2answers
228 views

Sensibility of using generic client keys with openvpn in this scenario

I have configured a working openvpn server (ubuntu 10.04) and client, no problems. I generated certificates and key files and such like for a client machine. We deploy a number of these generic ...
2
votes
3answers
4k views

Is a PPTP VPN too insecure to consider using?

I need to set up a VPN for our small office. There will only be one person using it, and they will be transmitting private financial information in many cases. I know that PPTP has a number of ...
0
votes
1answer
224 views

openvpn: client access policies

I'm trying to setup client access policies, akin to what is described in openvpn documentation. The configuration will use tun device in the above example, it seems the only thing restricting ...
9
votes
6answers
12k views

How to check that an OpenVPN server is listening on a remote port without using OpenVPN client?

I need to check that an OpenVPN (UDP) server is up and accessible on a given host:port. I only have a plain Windows XP computer with no OpenVPN client (and no chance to install it) and no keys needed ...
23
votes
8answers
42k views

OpenVPN vs. IPSec - Pros and Cons, what to use?

interestingly I have not found any good searchresults when searching for "OpenVPN vs IPSec": I need to setup a private LAN over an untrusted network. And as far as I know, both approaces seem to be ...
1
vote
1answer
55 views

The feasibility of using a VPN to secure only the admin portion of a site

It has been suggested that the admin section of a custom CMS we use require VPN access to reach. How feasible is this? The site has a front end http://thesite.com and a backend ...
1
vote
1answer
516 views

What can silently block a port to be accessed on Ubuntu 10.04 Server?

I've got a proprietary service running on port 8090 (actually running on a VBoxHeadless VM and capturing this port from the host machine) on an Internet server. Nmap shows port 8090 open both on host ...
0
votes
1answer
1k views

Basic IPTables setup for OpenVPN/HTTP/HTTPS server

I'm trying to get a basic IPTables setup on my server which will allow HTTP/SSH access, as well as enable the use of the server as an OpenVPN tunnel. The following is my current rule setup - the ...
3
votes
3answers
1k views

Multiple openvpn clients on one openvpn server

Can I have multiple openvpn clients connecting to a single openvpn server? The following setting works well for a single user This is the server configuration (openvpn.conf) port 1194 proto udp dev ...
4
votes
3answers
738 views

How secure is a VPN connection over WiFi?

I travel a lot and connect to public wifi hotspots all the time. What information will be given out if I use VPN within public wifi hotspots? Will the owners or intruders in the hotspot be able to ...
2
votes
1answer
620 views

Security VPN vs RDP

I was wondering which is more secure RPD or VPN I realize RDP over VPN is the most secure. I was just wondering what security issues there is with just RDPing from home to a workstation at work is and ...
2
votes
2answers
227 views

advanced openvpn - how do clients generate their own private keys and get the remote ca to sign their certificate

From answers to this question ive been recommended to not create client keys on the server home to ca.key but rather make the clients create their own private key and simple pass a csr to the ca ...
1
vote
2answers
157 views

How to generate keys for clients whilst keeping ca.key safe

I'm setting up a small vpn service for 10 - 100 expats so they can access normally blocked sites. I would like them to be able to sign up via my website, which upon payment the site will generate ...
2
votes
4answers
584 views

Need an absolute proxy server to route HTTPS, FTP, etc

I have managed to setup a squid proxy server as an HTTP proxy and this is working well. However, it does not work with HTTPS. I am looking at making use of an external machine to setup as a proxy for ...
13
votes
6answers
13k views

How do you avoid network conflict with VPN internal networks?

While there's a wide variety of private non-routable networks across 192.168/16 or even 10/8, sometimes in being thoughtful of potential conflict, it still occurs. For example, I set up an ...