Questions tagged [tunnel]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2 votes
1 answer
110 views

WinSCP-like ssh tunnel in Chrome OS

For the Chrome OS, is there any equivalent to the SSH tunnel functionality seen in WinSCP? At the destination, I need to tunnel from one machine via SSH into another for SFTP purposes. Usually I'm on ...
0 votes
1 answer
53 views

Cannot connect to MariaDB through an OpenVPN tunnel

Similar to this issue Unable to connect to MariaDB through an OpenVPN tunnel I cannot connect to the MariaDB server through OpenVPN. The setup is - Ubuntu 20.04, mariadb Ver 15.1 Distrib 10.3.39-...
1 vote
1 answer
745 views

Session Continually Times out when Accessing SuperMicro IPMI via Cloudflare Tunnel

I have a SuperMicro X12dpi-N6 motherboard system that is currently running Ubuntu 22.04 Server. In order to support remote maintenance, I configured a cloudflare tunnel that would allow me to access ...
0 votes
1 answer
96 views

cannot connect client to wireguard server in LAN

10k feet view I want to connect my PC in LAN to a server in the same LAN using wireguard to use his services through a tunnel. server conf [Interface] Address = 10.0.0.1/24 SaveConfig = true ...
4 votes
4 answers
17k views

How can I route traffic over IPSec tunnel?

I have two sites: MAIN (local subnet 192.168.0.0/24, external IP: M.M.M.M) and CLIENT (10.0.0.0/24, external IP: C.C.C.C). I created an IPSec tunnel between the sites and both sites can ping computers ...
0 votes
1 answer
110 views

IPsec tunnel gets connected, Phase 2 is successful but no IP adapter is created thus tunnel does not work

I am trying to establish an IPsec tunnel between my virtual server and a customer's server. The IPsec tunnel gets established successfuly in Phase 2, but no IP gets added to my system. This is the ...
0 votes
0 answers
212 views

Simple MySQL tunnel without SSL or SSH?

What I have I have a MySQL database that allows whitelisting only 2 individual IP addresses. No other access to that server except a MySQL username and password. What I need I need to connect Google ...
3 votes
1 answer
251 views

Choose any available SSH tunnel

I need to connect to a remote server behind jump hosts. There are several jump hosts (residing in different regions) that I can tunnel through to reach this remote server. So I need to connect to this ...
0 votes
0 answers
447 views

Connecting squid to upstream proxy using CONNECT request

I'm setting up a reverse proxy that has to forward all the requests to a given url.com/resource. Now, that resource is behind a proxy, so it has to use the CONNECT request. The idea is that squid, ...
0 votes
1 answer
794 views

Tunnel Linux traffic to Windows

I have two servers. Windows and Linux. Let's say Linux has the IP 1.2.3.4 and Windows 5.6.7.8. I want all traffic to be forwarded to windows as a tunnel. If I connect with 1.2.3.4:329 I want to ...
0 votes
0 answers
112 views

ping reports not receiving any package while tcpdump logs echo replies

INTRO: There's an IPIP tunnel (call it megatun0) to a machine connected to a private network. The megatun0 tunnel is bound with the address 192.168.15.1. One of the network interface on the machine ...
0 votes
1 answer
11k views

Wireguard won't tunnel all traffic to server

I'm having a heck of a time getting WG to tunnel all my traffic back to the server. I thought it would be a simple one line process, but it isn't. I've installed the latest version, removed, ...
0 votes
0 answers
86 views

Why is there still traffic to destinations other than the peer address when a wireguard tunnel is active?

Backstory: I've set up my firewall rules to prevent traffic from leaking outside of the wireguard vpn tunnel, because it happened before that the wg interface was active, but there was no active ...
0 votes
3 answers
326 views

Connect directly to SSH tunnel without having to first connect to server?

I just setup my Raspberry Pi to create a remote SSH tunnel with a VPS I have. It works, so from my computer I ssh into my VPS (with something like 'ssh [email protected]', and once connected to that I ssh ...
0 votes
0 answers
571 views

Cannot get a local address when establishing tunnels using openVPN

I am trying to establish a tunnel with a remote server using openVPN, at the beginning everything went just fine, while a few days later the establishing process often failed (now it has a 100 percent ...
0 votes
0 answers
141 views

using putty and socat to run rust server behind firewalls

i want to run a publicly accessible Rust server on a windows machine behind some routers and firewalls. the idea is tunneling the local server ports to a public machine where they are accessable: rust ...
0 votes
1 answer
301 views

Can I tunnel all ports from remote server to 127.0.0.2 (for example), so work with it like with localhost

I have a remote server. I started on remote server app that listen localhost only. I want to tunnel this server to local ip like 127.0.0.2 and access this app through like I on remote server. I need ...
0 votes
2 answers
2k views

How to hide origin IP of SMTP server by tunneling/proxying incoming port 25 traffic to real mail server

We have most of our stuff behind Cloudflare. However, some services such as mail (ex: mail.mydomain.com MX record) cannot be pushed through cloudflare and they expose our mail server's IP which makes ...
1 vote
0 answers
124 views

Forward traffic server to another server with iptable and domain

I want to forward all traffic from server1 to server2 with domain same: sysctl net.ipv4.ip_forward=1 iptables -t nat -A PREROUTING -p tcp --dport 22 -j DNAT --to-destination IpServer1 iptables -t nat -...
2 votes
0 answers
215 views

How does a vpn route all traffic through it's tunnel but allow it's own traffic to go over the internet

TL;DR I want all outgoing traffic from my system to be routed to a tun0 device, wrapped with DNS packets and then sent to the internet, but the DNS packets also gets routed back to tun0 device. ...
0 votes
1 answer
172 views

XFRM IPsec over Geneve

I need to run IPsec over a Geneve tunnel (or GRETAP). I can get the IPsec tunnel to work using public IPs as endpoints (so it's just IPsec) but not using private IPs on the Geneve link (so it's IPsec/...
0 votes
2 answers
169 views

Cloudflare Network Policy - How do I apply my policy to only one subdomain?

I have a Cloudflare Tunnel with two subdomains. I need one of them to be public and the other one to be blocked if the source isn't my IP. I created a network policy that says if SNI Domain is admin....
0 votes
1 answer
222 views

No IPv6 connectivity on the router behind the NAT

I have the following scenario. My ISP does not provide IPv6. As common practice, I've created a SIT tunnel with Hurricane. My network is the following. WAN (eth0) ------------ router A ...
1 vote
2 answers
3k views

Linux lightweight tunnels

Linux now support lightweight tunnels https://lwn.net/Articles/650778/ which means tunnel configured on the routes (so no need to set up one interface by tunnel). But unfortunately I did not manage to ...
2 votes
1 answer
705 views

How to setup tunnel/vxlan using "ip encap" for ipv6 on Linux?

Using light-weight tunnels allows the same (tunnel)device to be used for many destinations (among other things). For vxlan/ipv4 it works; ip link add vxlan4 type vxlan dstport 4789 dev eth1 ttl 4 ...
4 votes
1 answer
2k views

Forward IP packets to tunnel device

I have created an tunnel device using ip tuntap add dev tun0 mode tun user 0 group 0 I then assign it an ip address 192.168.0.1/22 ifconfig tun0 192.168.0.1 netmask 255.255.252.0 On my ethernet ...
0 votes
0 answers
134 views

Windows 10 and OpenSSH to encrypt a local TCP port

I'm working on a Windows 10 machine. I wrote 2 apps: server and client. Both of them communicate via standard TCP sockets, no encryption. I installed OpenSSH, no certificates at the moment, just ...
0 votes
1 answer
3k views

Routing one machine's traffic through GRE tunnel to a remote NAT

I had to solve the following dilemma for a friend and thought I'd document how we did it here... Here's the situation: His home network 192.168.1.0/24 and it sits behind a Linux router that performs ...
2 votes
1 answer
1k views

GRE Tunnel in CentOS

How to create a GRE Tunnel in CentOS pointing all connections to server A for the server B? I have a public server with DDoS protection and need to use this as a firewall to filter acess to the other ...
0 votes
0 answers
50 views

send traffic from openvpn to IPIP tunnel

We have a network interface that is open to the Internet. (ens160) We created an ipip tunnel and it was established correctly as expected (we placed 10.10.30.1 <-->10.10.30.2 | mytun) then we ...
1 vote
0 answers
76 views

Connection to Apache server dont pass from openVPN tunnel

I working with two VMs in virtualbox. Both of them are in one Subnet 10.0.2.0. On first VM I run client.conf and on other VM run server.conf and startup Apache Server. OpenVPN tunnel established ...
1 vote
1 answer
3k views

How to troubleshoot GRE tunnel issues?

I commonly run into issues where a GRE tunnel (CentOS server to server, not router based) works and pings fine from both ends but the IP / Range being tunneled does not function. This almost always ...
1 vote
1 answer
397 views

How to forward all traffic from second device through openVPN tunnel?

I want to connect a new machine remotely to our company network, so it can access the active directory there. The old machine has access to the company network through an OpenVPN tunnel. When ...
3 votes
1 answer
5k views

Add persistent bridge and tap in ubuntu 20.04 server

I'm trying to create a bridge whose interface is a tap, both with static IPs, and have them persist across reboots. In Ubuntu 14.04.6 LTS, this could be accomplished by editing /etc/network/interfaces ...
0 votes
1 answer
2k views

iptables forward port range through OpenVPN

I have a VPN server (the "host" - 10.8.1.1) on a public VPS instance running OpenVPN. The second instance I am running (the "client" - 10.8.1.2) is a local ESXi instance connected to the host vpn ...
0 votes
1 answer
366 views

Routing all Traffic through a VPN Node while accepting incoming WAN Connections

I want to route all traffic through another VPN-Node, while: Keep the Connection to the VPN-Server active (already works) Still accepting WAN-Connections on that Client. My Client Node Configuration:...
-1 votes
1 answer
599 views

Using OVH VPS as a shield to dedicated machine

I am having a few dedicated machines in a few hosting companies which either do not offer DDOS protection or their protection is awful. I've been contacting a few hosting companies and friends and got ...
0 votes
0 answers
242 views

Configuring a VPN using Policy Routing on Zorin (Ubuntu 20.04)

A bit stuck here. Semi familiar with routing and semi familiar with linux. Just enough to be dangerous but apparently not enough to be dangerous enough. Hoping someone can point me in the right ...
0 votes
1 answer
89 views

Issue with cross OpenVPN tunnels

I have the following network topology. I'm physically located at VPN Client 1. First, I successfully establish VPN Tunnel 1 and VPN Client 1 connects to VPN Server 2 and is able to talk to VPN Client ...
0 votes
2 answers
2k views

Rsync from A to C thru reverse tunnel on B

Been searching for awhile on this and haven't found a solution. Machine C has a persistent reverse tunnel to machine B. I.e machine B can connect back to machine C thru the reverse tunnel. I can ...
1 vote
0 answers
557 views

Block IPv6 on Tun0

I'm setting up a VPN tunnel for some services. I created a vpntunnel/vpntunnel user/group that is routed to the tun0 interface based on the group ID. That works quite fine. Commands below run as ...
0 votes
0 answers
45 views

route packets from specific hosts to virtual device

PIMv2 I think the issue is with multicast. I want to create a GRE tunnel that supports multicast PIMv2. I am seeing the server sending PIMv2 Hello messages to my gre tunnel but my machine is not ...
0 votes
1 answer
94 views

Allow access to webserver located in a LAN from remote server hosted at GoDaddy

I want to allow people to access a webserver located on acomputer in my LAN buy my ISP does not allow me to open any ports. I have a website hosted on a shared hosting that allows ssh access. Is there ...
1 vote
1 answer
1k views

Proxy/Route requests to subdomains to different local/wireguard IP addresses?

We have a virtual machine with a public IPv4 address, to which our example.com and *.example.com domain points. We have several distributed low-tech computers establishing a wireguard connection/...
0 votes
1 answer
104 views

Cisco GRE routing semantics to ip_gre

I am reading this article about setting up a GRE IP Tunnel: https://packetpushers.net/anatomy-of-gre-tunnels/ There's a section about creating a GRE tunnel interface on router A R1: interface ...
0 votes
1 answer
1k views

SSH tunnel over multi hops using putty (two hops)

I have these config: Host with putty -- > Gateway A (port 22 open) --> FinalMachine (port 22 with gateway A open and port 18080 with apache). Like I don't have communication from Host with putty ...
0 votes
1 answer
1k views

Can a VPN service be used like a reverse VPN allowing inbound traffic for serving a website?

I’ve done quite a bit of searching, and it seems this can be done, but the answers I seem to find are either vague or responses are something along the lines of “but why would you want to do that?” I’...
1 vote
5 answers
4k views

Linux foo-over-udp tunnel creation issues

I want to create fou(foo-over-udp) tunnel on linux 4.4.10 using iproute2 4.5.0 and while trying to create a tunnel i get the following error: sudo ip link add dev tun0 type ipip remote 172.19.0.9 ...
0 votes
1 answer
270 views

Can LACP run over Linux tunnel devices?

I'm looking for a way to know if a tunnel device is up or down without needing to use ping myself. Every single tunnel device (gre, ipip, l2tp, geneve, etc) does not have a logical mechanism to decide ...
2 votes
1 answer
2k views

Redirect SSH traffic through GRE tunnel

I'm trying to redirect all local connections with destination matchs port 22 to specified tunnel using iptables MARK, but, something is going wrong. 1.1.1.1 my public address 2.2.2.2 tunnel public ...

1
2 3 4 5