Tag Info

New answers tagged

0

As Jim says the examples on the OpenVPN site use # for comments and ; to comment out settings. There is no functional difference but this convention makes it easier to visually identify settings that are commented out. From https://openvpn.net/index.php/open-source/documentation/howto.html#examples ################################################# # Sample ...


0

Try the following in your server.conf : push "redirect-gateway def1" push "dhcp-option DNS 8.8.8.8" You will not be able to ping the instance by name. The instance name is used in conjunction with gcloud commands. The workaround is to add the IPs as names in /etc/resolv.conf Let me know how this works for you !


0

Your VPN needs to be routed, not bridged, and the subnet that your VPN clients are on has to be outside the bounds of the VPC supernet. Then, you add a static route for the VPN client subnet in the VPC routing tables, with the destination of that route specified as the instance ID of your vpn server instance. The VPC network is a virtual, software-defined ...


0

I've searched everywhere on the Internet to no avail for the right solution to this problem, until I got here. After running the OpenVPN GUI with elevated administrative access, the problem was solved. Just running the application as administrator got everything right. Thank you for sharing your experience.


0

Wouldn't it be better to use openvpn options instead of bringing-in iptables? local 11.12.13.2 bind


1

I had the same error when trying this on my Raspberry Pi 2. First I found that starting the OpenVPN with this command returns some useful information. sudo /usr/sbin/openvpn --config /etc/openvpn/mullvad_linux.conf This made it clear I needed to update the config file with the correct path for the other ca.cert, mullvad.crt, mullvad.key, crl.pem by ...


0

If your ESXi host has redundant connections to the network, there are a variety of ARP issues that can appear due to the default setting of Net.ReversePathFwdCheckPromisc. pfSense users using CARP were among the earliest to debug this, described over at https://doc.pfsense.org/index.php/CARP_Configuration_Troubleshooting In a similar environment, we have ...


0

Okey, so I checked if the .opvn config worked on another machine and it did! So I compared both machine's and couldn't find anything odd. So I restarted the network adapter a few times and suddenly it is working. Restarting the network adapter was one of the first things I did, but didn't worked at first. So, I don't know why it suddenly worked, but it's ...


0

Ok, the question of @enno-gröper gave me a hint. Of course host2 doesn't know anything about 10.1.0.0/24. So I tried it with masquerading all traffic from 10.1.0.0/24 to 192.168.178.0/24 through tap0 on the OpenVPN server and it worked.


0

I got messed up with out with SNAT rule here. Correct rule is ip6tables -t nat -A POSTROUTING -s 2a01:230:2:6::312 -o eth0 -j SNAT --to-source 2a01:230:2:6::2ea I changed outgoing interface from tun0 to eth0 because I want to match packets going outside, not inside. I still pretty confused, how this could half-work, please impove this answer, if you ...


0

AFAIK, you should be able to use the local OpenVPN instance as a fallback in sniproxy. You can setup two sniproxy listen blocks and both of them can use OpenVPN as a fallback. If you do not want to use OpenVPN as a fallback, you might use sslh to multiplex OpenvPN and TLS over the same port (using a single ): iptables -> sniproxy -> HTTP servers; iptables ...


2

The SSL configuration, including the Listen directive for port 443, is in the /etc/httpd/conf.d/mod_ssl.conf file. If you don't find that file, or don't find the proper Listen directive in that file, then something is beyond wacky with your system.


-2

I also had the problem > I tried to access from a Windows 7 Client to a SAMBA share over OPENVPN .. at the beginning I could access the different directories, but when I tried to open a file, it was just possible with 1kb-Textfiles, no chance with pdf or docx - then I added the mssfix parameter to the openvpn-file > also no difference .. then I tried to play ...


1

Use absolute path to point where each certificate/key is: ca /etc/openvpn/easy-rsa/keys/ca.crt cert /etc/openvpn/easy-rsa/keys/server.crt key /etc/openvpn/easy-rsa/keys/server.key dh /etc/openvpn/easy-rsa/keys/dh2048.pem You can also start the OpenVPN server invoking it's own binary. openvpn --config /etc/openvpn/server.conf --daemon As roaima said, ...


1

Your problem is that the service startup file for CentOS will try to run any config file that's in /etc/openvpn - after all, it has no way of knowing which was the intended config file. Delete the client.conf file that's hanging around in that directory, or as raoima suggests move it to one side, and the openvpn startup script will stop trying to invoke it. ...


0

The easiest way I can think of is checking the link status. For example: $ ip link show tun0 11: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1400 qdisc pfifo_fast state UNKNOWN mode DEFAULT qlen 500 link/none In the event it is active, you will see UP in those <>. You can also check that there are active routes associated with the ...


0

What specifically did you do for step 2 - extract the configuration files? Usually you need to tell openvpn what configuration file to use, unless there is only one conf file. You need something that looks like openvpn.conf and a certificate to go along with it, usually something.pem ... On RHEL, you'd put it in /etc/openvpn/ ... Also, I'm not sure when it ...


0

The scramble patch adds no communication overhead (the packet size doesn't change) and negligible CPU overhead. Your issues are caused by the unpredictable nature of China's connectivity to the outside world. I advise that you move the vpn to a different location. Japan, Korea, Hong Kong and Taiwan should work much better.


0

Configure a status file. It shows a "OpenVPN CLIENT LIST" and a "ROUTING TABLE". The client list has entries with the following values: "Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since". Alternatively, you can configure a mnagenment socket and use the status command: echo status | socat STDIO SOCKET:/var/run/openvpn.socket This will ...


0

I didn't find the reason of closing TUN by the server, but I could fix the problem by adding following line of code in server configuration file: # Executed after TCP/UDP and TUN/TAP close. down "/usr/sbin/openvpn --writepid /var/run/openvpn.server.pid --daemon ovpn-server --cd /etc/openvpn --config /etc/openvpn/server.conf" It automatically restarts ...



Top 50 recent answers are included