I have an openVPN client on my personal Ubuntu laptop in order to connect to two specific company web servers thru ssh.
Can the SysAdmin who manages the VPN server track my non related internet traffic?
This is the client config:
client
dev [OMITTED]
proto udp
port 1194
remote [OMITTED]
nobind
pull
persist-key
persist-tun
ca [inline]
cert [inline]
key [inline]
remote-cert-tls server
tls-auth [inline] 1
auth SHA512
cipher AES-256-CBC
verb 0
route-method exe
route-delay 2
auth-user-pass foo.txt
comp-lzo
From what I can understand he cannot but I would really like to be sure this is not a possibility.
EDIT: If so, what can I change in the configuration to only route the traffic to those 2 servers thru the VPN.
(Also, does putting the servers behind a VPN make any sense when access is already done with ssh? This could maybe be on another question!?)
Thanks!
ip route
orip route show dev tunX
, wheretunX
is your tunnel virtual interface, probablytun0
). An OpenVPN client can ignore the routes that the server sends to it.default via 192.168.1.254 dev wlp5s0 proto dhcp metric 600 linkdown 10.20.25.0/24 dev tun_xx-de proto kernel scope link src 10.20.25.210 10.20.25.0/24 via 10.20.25.1 dev tun_xx-de metric 1 169.254.0.0/16 dev wlp5s0 scope link metric 1000 linkdown 192.168.1.0/24 dev wlp5s0 proto kernel scope link src 192.168.1.75 metric 600 linkdown
10.20.25.0/24
network is routed through the VPN connection, the rest of the traffic uses your normal connection (so can be tracked only by your ISP).