Questions tagged [tunnel]
The tunnel tag has no usage guidance.
222
questions
0
votes
1
answer
49
views
Cannot connect to MariaDB through an OpenVPN tunnel
Similar to this issue Unable to connect to MariaDB through an OpenVPN tunnel
I cannot connect to the MariaDB server through OpenVPN. The setup is -
Ubuntu 20.04,
mariadb Ver 15.1 Distrib 10.3.39-...
2
votes
1
answer
91
views
WinSCP-like ssh tunnel in Chrome OS
For the Chrome OS, is there any equivalent to the SSH tunnel functionality seen in WinSCP?
At the destination, I need to tunnel from one machine via SSH into another for SFTP purposes.
Usually I'm on ...
0
votes
1
answer
72
views
cannot connect client to wireguard server in LAN
10k feet view
I want to connect my PC in LAN to a server in the same LAN using wireguard to use his services through a tunnel.
server conf
[Interface]
Address = 10.0.0.1/24
SaveConfig = true
...
0
votes
1
answer
101
views
IPsec tunnel gets connected, Phase 2 is successful but no IP adapter is created thus tunnel does not work
I am trying to establish an IPsec tunnel between my virtual server and a customer's server. The IPsec tunnel gets established successfuly in Phase 2, but no IP gets added to my system.
This is the ...
0
votes
0
answers
197
views
Simple MySQL tunnel without SSL or SSH?
What I have
I have a MySQL database that allows whitelisting only 2 individual IP addresses. No other access to that server except a MySQL username and password.
What I need
I need to connect Google ...
3
votes
1
answer
248
views
Choose any available SSH tunnel
I need to connect to a remote server behind jump hosts.
There are several jump hosts (residing in different regions) that I can tunnel through to reach this remote server.
So I need to connect to this ...
0
votes
0
answers
426
views
Connecting squid to upstream proxy using CONNECT request
I'm setting up a reverse proxy that has to forward all the requests to a given url.com/resource. Now, that resource is behind a proxy, so it has to use the CONNECT request.
The idea is that squid, ...
1
vote
1
answer
690
views
Session Continually Times out when Accessing SuperMicro IPMI via Cloudflare Tunnel
I have a SuperMicro X12dpi-N6 motherboard system that is currently running Ubuntu 22.04 Server. In order to support remote maintenance, I configured a cloudflare tunnel that would allow me to access ...
0
votes
0
answers
106
views
ping reports not receiving any package while tcpdump logs echo replies
INTRO:
There's an IPIP tunnel (call it megatun0) to a machine connected to a private network. The megatun0 tunnel is bound with the address 192.168.15.1. One of the network interface on the machine ...
0
votes
0
answers
79
views
Why is there still traffic to destinations other than the peer address when a wireguard tunnel is active?
Backstory:
I've set up my firewall rules to prevent traffic from leaking outside of the wireguard vpn tunnel, because it happened before that the wg interface was active, but there was no active ...
0
votes
0
answers
549
views
Cannot get a local address when establishing tunnels using openVPN
I am trying to establish a tunnel with a remote server using openVPN, at the beginning everything went just fine, while a few days later the establishing process often failed (now it has a 100 percent ...
0
votes
0
answers
133
views
using putty and socat to run rust server behind firewalls
i want to run a publicly accessible Rust server on a windows machine behind some routers and firewalls. the idea is tunneling the local server ports to a public machine where they are accessable: rust ...
0
votes
1
answer
292
views
Can I tunnel all ports from remote server to 127.0.0.2 (for example), so work with it like with localhost
I have a remote server.
I started on remote server app that listen localhost only.
I want to tunnel this server to local ip like 127.0.0.2 and access this app through like I on remote server.
I need ...
1
vote
0
answers
121
views
Forward traffic server to another server with iptable and domain
I want to forward all traffic from server1 to server2 with domain
same:
sysctl net.ipv4.ip_forward=1
iptables -t nat -A PREROUTING -p tcp --dport 22 -j DNAT --to-destination IpServer1
iptables -t nat -...
2
votes
0
answers
203
views
How does a vpn route all traffic through it's tunnel but allow it's own traffic to go over the internet
TL;DR
I want all outgoing traffic from my system to be routed to a tun0 device, wrapped with DNS packets and then sent to the internet, but the DNS packets also gets routed back to tun0 device.
...
0
votes
2
answers
157
views
Cloudflare Network Policy - How do I apply my policy to only one subdomain?
I have a Cloudflare Tunnel with two subdomains. I need one of them to be public and the other one to be blocked if the source isn't my IP. I created a network policy that says if SNI Domain is admin....
0
votes
0
answers
706
views
Nginx and Cloudflare Argo Tunnel - 502 Bad gateway
I am using a Cloudflare Tunnel, along with a Nginx docker container, under the same tunnel network. I followed this guide to set up Nginx with Cloudflare. The goal is for me to be able to reach ports ...
0
votes
1
answer
194
views
No IPv6 connectivity on the router behind the NAT
I have the following scenario. My ISP does not provide IPv6. As common practice, I've created a SIT tunnel with Hurricane.
My network is the following.
WAN (eth0)
------------ router A
...
2
votes
1
answer
655
views
How to setup tunnel/vxlan using "ip encap" for ipv6 on Linux?
Using light-weight tunnels allows the same (tunnel)device to be used for many destinations (among other things). For vxlan/ipv4 it works;
ip link add vxlan4 type vxlan dstport 4789 dev eth1 ttl 4 ...
0
votes
0
answers
129
views
Windows 10 and OpenSSH to encrypt a local TCP port
I'm working on a Windows 10 machine. I wrote 2 apps: server and client.
Both of them communicate via standard TCP sockets, no encryption.
I installed OpenSSH, no certificates at the moment, just ...
0
votes
0
answers
47
views
send traffic from openvpn to IPIP tunnel
We have a network interface that is open to the Internet. (ens160) We created an ipip tunnel and it was established correctly as expected (we placed 10.10.30.1 <-->10.10.30.2 | mytun) then we ...
1
vote
0
answers
75
views
Connection to Apache server dont pass from openVPN tunnel
I working with two VMs in virtualbox. Both of them are in one Subnet 10.0.2.0. On first VM I run client.conf and on other VM run server.conf and startup Apache Server. OpenVPN tunnel established ...
1
vote
1
answer
377
views
How to forward all traffic from second device through openVPN tunnel?
I want to connect a new machine remotely to our company network, so it can access the active directory there.
The old machine has access to the company network through an OpenVPN tunnel.
When ...
0
votes
1
answer
162
views
XFRM IPsec over Geneve
I need to run IPsec over a Geneve tunnel (or GRETAP). I can get the IPsec tunnel to work using public IPs as endpoints (so it's just IPsec) but not using private IPs on the Geneve link (so it's IPsec/...
0
votes
1
answer
362
views
Routing all Traffic through a VPN Node while accepting incoming WAN Connections
I want to route all traffic through another VPN-Node, while:
Keep the Connection to the VPN-Server active (already works)
Still accepting WAN-Connections on that Client.
My Client Node Configuration:...
-1
votes
1
answer
589
views
Using OVH VPS as a shield to dedicated machine
I am having a few dedicated machines in a few hosting companies which either do not offer DDOS protection or their protection is awful. I've been contacting a few hosting companies and friends and got ...
0
votes
1
answer
11k
views
Wireguard won't tunnel all traffic to server
I'm having a heck of a time getting WG to tunnel all my traffic back to the server. I thought it would be a simple one line process, but it isn't. I've installed the latest version, removed, ...
0
votes
2
answers
2k
views
How to hide origin IP of SMTP server by tunneling/proxying incoming port 25 traffic to real mail server
We have most of our stuff behind Cloudflare.
However, some services such as mail (ex: mail.mydomain.com MX record) cannot be pushed through cloudflare and they expose our mail server's IP which makes ...
0
votes
0
answers
241
views
Configuring a VPN using Policy Routing on Zorin (Ubuntu 20.04)
A bit stuck here. Semi familiar with routing and semi familiar with linux. Just enough to be dangerous but apparently not enough to be dangerous enough.
Hoping someone can point me in the right ...
0
votes
1
answer
83
views
Issue with cross OpenVPN tunnels
I have the following network topology. I'm physically located at VPN Client 1. First, I successfully establish VPN Tunnel 1 and VPN Client 1 connects to VPN Server 2 and is able to talk to VPN Client ...
1
vote
0
answers
548
views
Block IPv6 on Tun0
I'm setting up a VPN tunnel for some services. I created a vpntunnel/vpntunnel user/group that is routed to the tun0 interface based on the group ID. That works quite fine. Commands below run as ...
0
votes
1
answer
91
views
Allow access to webserver located in a LAN from remote server hosted at GoDaddy
I want to allow people to access a webserver located on acomputer in my LAN buy my ISP does not allow me to open any ports. I have a website hosted on a shared hosting that allows ssh access. Is there ...
0
votes
0
answers
45
views
route packets from specific hosts to virtual device
PIMv2 I think the issue is with multicast.
I want to create a GRE tunnel that supports multicast PIMv2. I am seeing the server sending PIMv2 Hello messages to my gre tunnel but my machine is not ...
1
vote
1
answer
1k
views
Proxy/Route requests to subdomains to different local/wireguard IP addresses?
We have a virtual machine with a public IPv4 address, to which our example.com and *.example.com domain points.
We have several distributed low-tech computers establishing a wireguard connection/...
0
votes
1
answer
99
views
Cisco GRE routing semantics to ip_gre
I am reading this article about setting up a GRE IP Tunnel: https://packetpushers.net/anatomy-of-gre-tunnels/
There's a section about creating a GRE tunnel interface on router A
R1:
interface ...
3
votes
1
answer
5k
views
Add persistent bridge and tap in ubuntu 20.04 server
I'm trying to create a bridge whose interface is a tap, both with static IPs, and have them persist across reboots.
In Ubuntu 14.04.6 LTS, this could be accomplished by editing /etc/network/interfaces ...
0
votes
1
answer
1k
views
SSH tunnel over multi hops using putty (two hops)
I have these config:
Host with putty -- > Gateway A (port 22 open) --> FinalMachine (port 22 with gateway A open and port 18080 with apache).
Like I don't have communication from Host with putty ...
0
votes
1
answer
1k
views
Can a VPN service be used like a reverse VPN allowing inbound traffic for serving a website?
I’ve done quite a bit of searching, and it seems this can be done, but the answers I seem to find are either vague or responses are something along the lines of “but why would you want to do that?”
I’...
0
votes
1
answer
217
views
Connecting two nodes, dynamic tcp connections tunneling through a central server
Conceptual system in my mind of what i'm looking for:
Given two hosts (can be pcs) !
Both can be on dynamic network (dynamic ip)!
Both connect to the same central server to find each other! (in my ...
0
votes
1
answer
262
views
Can LACP run over Linux tunnel devices?
I'm looking for a way to know if a tunnel device is up or down without needing to use ping myself. Every single tunnel device (gre, ipip, l2tp, geneve, etc) does not have a logical mechanism to decide ...
0
votes
1
answer
3k
views
Routing one machine's traffic through GRE tunnel to a remote NAT
I had to solve the following dilemma for a friend and thought I'd document how we did it here...
Here's the situation:
His home network 192.168.1.0/24 and it sits behind a Linux router that performs ...
1
vote
1
answer
3k
views
Is there a way to reload new IPSEC certificates without restarting the service and interrupt existing tunnels?
I'm searching for a way to reload new IPSEC certificates without restarting the service and interrupt existing tunnel connections.
As part of the activity, I'm replacing certificates (including ...
0
votes
1
answer
483
views
Use working GRE tunnel as default on remote server
Purpose is to "protect" my backend dedicated server (B) using a front VPS (A) with a GRE tunnel and use the the new stablished interface (GRE1) as default on (B) in order not to leak the ...
0
votes
1
answer
144
views
EdgeRouter Route Incoming Traffic to another Public Network/Server
I am curious if this is possible in theory? At my colo datacenter, I have a lot of public IP addresses (/21) on a 1GB circuit using an Edge Router 6P (not using BGP). I want to temporarily rent a ...
0
votes
0
answers
324
views
A gre tunnel between Mikrotik and Cisco router
I really need your help
I'm trying to connect a Mikrotik router with a Cisco router with GRE tunnel using Public IPS
the problem is when I try to configure keep alive between both routers the tunnel ...
0
votes
1
answer
668
views
How to forward all traffic and IP addresses
I want to build a system that allows me to have "floating IPs". To do this, I want to have a single server with 5 IP addresses. It then relays that traffic to another machine (or more) ...
4
votes
1
answer
914
views
Programmatically open a SSH tunnel in active session?
I'm aware that after starting a new SSH session I can open the SSH shell to start a new tunnel (Enter then ~ and finally C):
>ssh -L 9000:localhost:9000
Forwarding port.
Is there a way to do it in ...
0
votes
0
answers
263
views
IPSec Phase 2 Configuration For Translated Subnets?
I have two networks with the 10.0.0.0/8 subnet I'm trying to connect via IPSec tunnels. I have the phase 1 configurations working but am a bit stuck on the phase 2 configurations. Each firewall used ...
1
vote
0
answers
120
views
Is it possible to send traffic through the VPN tunnel to the VPN gateway itself?
I have a WAN interface X and a web server Y behind NAT, that is traffic to X:443 is being forwarded to Y:443. Web server is accessible from the internet without any problems.
Then I have a site-to-...
0
votes
0
answers
40
views
Setting up a special tunnel
I live in a country with serious difficulties in accessing the free internet. Many sites are filtered, the speed in resolving host names is slow, bringing up web sites takes time, and you feel how ...