New answers tagged

1

With route no-pull & route office.my-domain.com 255.255.255.255 net_gateway you are actually specifying that it will definitely use the VPN when it's officedomain IP. So in any case local or outside it will use VPN to connect to office. The solution you are asking to exclude office VPN while inside office network. There's no such openvpn config for ...


0

The problem is that ssh traffic starts going through the VPN when you connect to it. That means the ssh connection cannot continue (since you changed the endpoint). The idea is to fix the route for the ssh traffic, so that it keep on flowing over the same interface (I'm simplifying it a bit, this will not necessarily work in more complex environments). So, ...


1

Hi and thank you for the question... It is a little bit easier that you think ;-). You don't need all client certificates. Client certificates are needed for the client... Next to the configuration file there are 3-4 generated and "linked" files which could be embeded as section in the config file directly (these are all you need to have on the server / ...


0

I had similar problem with ubuntu. It was to do with ubuntu firewall and mangle and nat table. I could not pinpoint exactly which of them causing this failure. But be careful before proceeding. It will flush your firewall and iptables. In my case, I didn't had any other dependencies on the ubuntu firewall and nat. On the client ubuntu, I flushed all the ...


1

You can set up Firebird to listen on the VPN interface only (using the RemoteBindAddress config directive), so it won't be available on other interfaces at all. This has the caveat that the VPN must be up in order for Firebird to be able to start (as it needs to bind to the virtual interface OpenVPN sets up). Alternatively, you can setup the firewall on the ...


2

Netflix can be doing some traffic analysis, maybe something like 'witch vpn detector' (https://github.com/ValdikSS/p0f-mtu-script) Netflix filters address blocks associated with hosting providers, if you are able to get a residential IP, and VPN through it, you can access Netflix.


0

I'm pretty sure it's something like this: tc qdisc add dev tun0 parent root handle 1: htb default 30 tc class add dev tun0 parent 1: classid 1:1 htb sc rate 1000mbit ul rate 1000mbit tc class add dev tun0 parent 1:1 classid 1:11 htb sc rate 5mbit ul rate 5mbit The reason I say this is I use a script for limiting everyone except a select set to 5mbit, and ...


1

Sadly, there is no (known or supported) routing capability on IOS. You can just "dial in" and use that tunnel interface locally. No NAT, no other routing protcols. Technically it should be possible to use the tether (aka WiFi AP) function of your IOS device to connect a VPN gateway or justmore clients to the internet and your VPN, but that'd be very hacky (...


0

First you need to establish a VPN link between server A and B, let's say server B will get 10.10.0.1 as address, server A 10.10.0.2 and the virtual interface on server A will be called tun1. You can use whichever technology you fill more comfortable. Then, as remarked by davidgo, you need to use policy based routing on server A. In order to do so: Add a ...


0

OpenVPN files can reference shell scripts to be executed when a tunnel is enabled or disabled using the up and down directives. Example: up on-up.sh down on-down.sh


1

I solved. The problem, in this case, is this line missing in OpenVPN server configuration. local 192.168.1.117 So the right routing for me is: ip rule add from 192.168.1.117 table novpn ip route add default via 192.168.1.1 dev eth0 table novpn


1

This answer helped me, I was floundering around simply doing a systemctl enable openvpn, I needed to do systemctl enable openvpn@client The next problem was easily found by looking at journalctl -xe I then found the major problem was the name of my config file. Instead of client.ovpn I changed to client.conf and all worked.


Top 50 recent answers are included