New answers tagged

1

You can skip certificate authentication using client-cert-not-required and username-as-common-name in the configuration. Best to use tls-auth with a preshared key between client and server, too.


1

From the reference manual for OpenVPN 2.4: –explicit-exit-notify [n]: In UDP server mode, send RESTART control channel command to connected clients.


1

I believe you will need either your own DNS or at least your own DNS proxy server. This article provides a great break down of different Azure name resolution scenarios and the supported solution: Name resolution for resources in Azure virtual networks Specifically "Resolution of Azure hostnames from on-premises computers.", the stated approach is "...


0

Sorry if the question was worded in a strange way, but the solution I found that worked as I wanted was to use netcat: nc -uz 127.0.0.1 443 removing the -u flag if in TCP mode: https://github.com/helm/charts/pull/15580/files


0

From the official OpenVPN docs: Sun Feb 6 20:46:38 2005 OpenVPN 2.0_rc12 i686-suse-linux [SSL] [LZO] [EPOLL] built on Feb 5 2005 Sun Feb 6 20:46:38 2005 Diffie-Hellman initialized with 1024 bit key Sun Feb 6 20:46:38 2005 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ] Sun Feb 6 20:46:38 2005 TUN/TAP device tun1 opened Sun Feb 6 20:46:38 2005 ...


1

Some VPS has the configuration of enable PPP service, so you can check it and enable the PPP item. The default settings may be disabled, this can cause error: Couldn't open the /dev/ppp device: No such file or directory vps config for ppp


2

Solved using redirect-gateway with the block-local flag, essentially blocking all connections to the local network and routing all traffic through the VPN server to the remote network.


0

Recently I faced a similar situation as the OP had. Thank to the answers provided by @Cha0s and @Pablo Martinez, I was able to make it work for my situation. First, as they both said, we must have iptables rules to mark those packets which shouldn't go through VPN. @Cha0s was right to put the rules in the mangle table. According to iptables man page, you ...


3

No. Mobile user experience is poor as they may not be able to control which ISP they have access to. An IP address is not an authenticator by definitions like NIST sp800-63b. It is not a secret, nor is it in control of the user. The MAC address isn't even constant, it can be changed on Android (temporarily) without root. Android is not interested in EUI-...


0

The tun/tap interface is the way to pass packets between your application and the kernel network stack. Create the tap interface: ip tuntap add dev tun101 mode tun ip link set up dev tun101 ip a add 192.0.2.1/24 dev tun101 Let's ping some address from subnet assigned to the tun101 interface. ping 192.0.2.2 What's happen? The ping creates the socket, ...


0

I figured it out. I had to configure the iptables on the VPN client to act as a NAT with the MASQUERADE option, then I needed to add the VPN client's IP address on the respective interface as the default gateway on each system within that network. Allow machines on the internal network (Network A) to communicate out to the external network (Network B) You ...


0

The tun interface in the linux is just pseudo-interface to pass network packets between kernel network stack and userspace program, not more. It's not a VPN protocol. The answers follow from this fact: You cannot compare the TUN interface entity with VPN protocols. These things are totally different by nature. You cannot talk about penetrable of the TUN. ...


0

A old question, but in the SonicWall you can create a L2TP's configuration to be able to use any vpn client that use that standard. You are not forced to use the default's sonicwall vpn client at all. Configuring L2TP Server on SonicOS Enhanced The suggested configuration was confirmed to work with Microsoft Windows XP Service Pack 2 (SP2), Vista ...


0

In AWS you'll need to request a certificate through the Certificate Manager. When requesting a certificate you can verify domain ownership through DNS or email.


2

I guess the first question you should ask yourself is how your queries look, if the service considers them to be on the verge of violating acceptable use terms. In other words: What are you trying to achieve, and is there a better mechanism for doing that which doesn't, for example, cause unreasonable amounts of traffic?


1

Yes, it's pretty simple: iptables -t nat -A PREROUTING -p tcp --dst 172.16.0.1 --dport 53 -j DNAT --to-destination 1.1.1.1:53 iptables -t nat -A PREROUTING -p udp --dst 172.16.0.1 --dport 53 -j DNAT --to-destination 1.1.1.1:53 iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED,DNAT -j ...


0

this is a DNS issue. Check your DNS settings and make sure your OpenVPN server has a valid FQDN . Or ... Add your OpenVPN server ip to the windows hosts file.


Top 50 recent answers are included