OpenVPN is a free virtual private network (VPN) client and daemon.

learn more… | top users | synonyms

12
votes
2answers
14k views

How to refuse routes that are PUSHed by OpenVPN server?

When I establish an OpenVPN client connection over the Internet to our corporate OpenVPN server, it pushes several static routes. Unfortunately, these routes break some connectivity within my local ...
11
votes
1answer
8k views

Configuring OpenVPN to use Firewalld instead of iptables on Centos 7

I need some help configuring OpenVPN on Centos 7 using firewalld. I used iptables on Centos 6.5 and only had to add the following lines to /etc/sysconfig/iptables: -A POSTROUTING -s "10.0.0.0/24" -...
10
votes
4answers
3k views

Feed all traffic through OpenVPN for a specific network namespace only

I am trying to set up a VPN (using OpenVPN) such that all of the traffic, and only the traffic, to/from specific processes goes through the VPN; other processes should continue to use the physical ...
9
votes
6answers
24k views

Using OpenVPN with systemd

Ok, so I've been searching the web for solutions to this problem with no answers seeming to work for me. Hopefully someone can help me. I'm only trying to configure the OpenVPN Client. I'm running ...
9
votes
2answers
23k views

Port forward to VPN Client?

I've run into a bit of a puzzle and haven't had much luck finding a solution. Right now I am (sadly) connected to the net via Verizon 3G. They filter all incoming traffic so it is impossible for me to ...
8
votes
1answer
6k views

Routing public ipv6 traffic through openvpn tunnel

What I'm trying to do is to route IPv6 traffic through a vpn tunnel. That way, I should be able to use IPv6 in a network that doesn't support IPv6. I have a VPS which has an IPv6 block assigned. Part ...
8
votes
3answers
7k views

Slow NFS, nfsstat -c: what is authrefrsh (aka newcreds?) field about in detail?

(net-fs/nfs-utils-1.2.3-r1, 2.6.38.5-zen+ Gentoo) Googling this seems to be a complete dead end. man nfsstat says a whole lot of nothing about the subject. The closest I could get was finding out ...
7
votes
2answers
2k views

SSH session through OpenVPN cuts off / locks up after a few lines

I have a large number of identical fanless PCs running debian 6 (ARM). Most of these are connected via comcast and work ok. There are some that are connected to 'WiMax' modems and are having ...
7
votes
2answers
2k views

1:1 NAT with several identical LANs

I want to connect several LANs located on remote buildings. The "central" site have a Linux computer running OpenVPN. Each remote site also run OpenVPN. the central site has a LAN numbered 192.168.0....
7
votes
1answer
1k views

SELinux re-labeling problem while attempting to run OpenVPN

I'm trying to run OpenVPN under Fedora 19 with selinux (selinux-policy-targeted) in enforcing mode, and I'm running into an AVC I'm not entirely sure how to handle. Starting OpenVPN from the command ...
7
votes
1answer
2k views

Import VPN config files to NetworkManager from command line

One can import .ovpn files to NetworkManager through GUI tool nm-connection-editor (right click on nm-applet and click on Edit connections): Add -> Import a saved VPN configuration.... My goal is to ...
5
votes
1answer
37k views

OpenVPN: Push a route to client with a different gateway

I would like my OpenVPN server to push a route down to the client with a different default gateway. Specifically, my OpenVPN server has an internal IP address of 10.0.0.1, and I would like it to ...
5
votes
1answer
218 views

port forwarding to application in network namespace with vpn

I was able to set up a network namespace, establish a tunnel with openvpn and start an application that uses this tunnel inside the namespace. So far so good, but this application can be accessed via ...
5
votes
1answer
546 views

How to make sure OpenVPN is connected?

I need some sort of "safeguard" for my VPN connection. If the connection drops, the machine shouldn't even reach the internet. (I can reach the machine by other means.) Is it possible somehow? If I ...
5
votes
2answers
3k views

OpenVPN on OpenWrt

I have a step-by-step guide for OpenVPN on an OpenWRT 10.03 router: (wl500gpv2) Needed packages opkg install openvpn_2.1.1-1_brcm-2.4.ipk kmod-tun_2.4.37.9-1_brcm-2.4.ipk libopenssl_0.9.8m-3_brcm-2....
5
votes
1answer
924 views

How can I make the eth1 up and always available for remote access, where eth0 will be used for host to host IPSec VPN?

I am running Amazon EC2 instance with Red hat enterprise linux, where I have two network interface. Now: eth0 is currently active having public ip where I am remotely logged in via SSH, to ...
5
votes
1answer
5k views

Understand the Route table

I just setup the OpenVPN and it is working as expected. However, the routing table of the client is confusing me to no end. Here is the route table: # route -n Kernel IP routing table Destination ...
5
votes
0answers
593 views

Connect to a VPN from a Linux Virtual Machine [closed]

I am running an Ubuntu distro inside a VMWare virtual machine with a bridged connection on a Windows 7 host. What I am trying to do is to have the virtual machine connect to a VPN, but I'm not having ...
4
votes
1answer
6k views

Will the Linux ( red-hat ) Open VPNC Client connect to checkpoint or nortel VPN gateways?

Site: http://www.oucs.ox.ac.uk/network/vpn/linux-solaris/index.xml?ID=VPNC What is open VPNC: VPNC is an open-source VPN client for Linux and other Unix systems which is compatible with the OUCS VPN ...
4
votes
1answer
968 views

Debian CLI torrent program through VPN

Has anyone successfully set up a CLI-only (no web UI's!) torrent client that can tunnel all of its traffic through a VPN? (Either by sending all traffic through a particular interface or a SOCKS proxy)...
4
votes
1answer
699 views

List all DNS Servers, including those pushed by VPN

I want to know which DNS servers are in effect when I run commands like nslookup, dig, host, ping, etc. The general answer is to cat /etc/resolv.conf, or to look at NetworkManager, but that's only ...
4
votes
2answers
595 views

Configuring OpenVPN to share internet

my university is providing OpenVPN to provide public internet IP address for students (for some libraries etc.) - in other words, they are sharing their internet connection via openVPN... I would ...
4
votes
2answers
43k views

openvpn WARNING: No server certificate verification method has been enabled

I tried to install openvpn on debian squeez (server) and connect from my fedora 17 as (client). Here is my configuration: server configuration # Server TCP proto tcp port 1194 dev tun # Keys and ...
4
votes
2answers
2k views

Installing OpenVPN to replace Cisco VPN because Cisco will not work with the kernel I am on or downgrade instead?

I had difficulties installing Cisco5.0 VPN on my Ubuntu 10.04 LTS. I asked for assistance in this question: link to previous question. The answer is that this Cisco program will run on only older ...
4
votes
1answer
72 views

Issue installing OpenVPN via apt

Pastebin I wanted to install OpenVPN on my Debian Wheezy server at home, so I could create a tunnel with my phone or tablet from outside my home. We use OpenVPN at work, so I figured it would be easy ...
4
votes
1answer
1k views

How to fix this eth0 and eth1, where traffic going out via eth0 is failing?

I have two public IPs. One's connected to eth0 and one to eth1, from 2 separate routers as complete DMZ towards the LAN IP. I added this following: ip rule add from 10.0.0.108/32 table 1 # outbound ...
4
votes
0answers
258 views

Make systemd reload only single openvpn process and not the whole group

I'm running several openvpn instances on my server with debian stable; as well some clients as a server instance. Right now, when one of these instances fails, systemd seems to kill and restart the ...
4
votes
2answers
1k views

Starting SSH server after VPN starts

I am running an OpenVPN server on Ubuntu 14.04 as well as OpenSSH. I have my SSH server configured to bind to an IP address on my VPN interface. Once my machine boots, binding to that IP fails. ...
3
votes
4answers
8k views

Establish openvpn tunnel in bash script

I'm trying to write a script which will establish an openvpn tunnel when the computer boots up. The main problem lies in inputting the pkcs12 password. I realise it's very bad practice to have a ...
3
votes
3answers
20k views

OpenVPN - Socket bind failed on local address [AF_INET] IP:1194: Cannot assign requested address

How get it resolved? I am trying to start the openVPN server so that i can login remotely using username: demo and password: demo, but openVPN server is failing to start. What am i doing wrong, how ...
3
votes
4answers
6k views

openvpn[]: Options error: In [CMD-LINE]:1: Error opening configuration file

when trying to service openvpn start Oct 12 14:02:01 ccushing1 openvpn[9091]: Options error: In [CMD-LINE]:1: Error opening configuration file: devnet-client-vm.conf running openvpn devnet-client-...
3
votes
2answers
3k views

openvpn logrotate

I'm trying to rotate OpenVPNs logfiles every month. The problem seems to be that simply renaming the files doesn't do the trick. The data still gets written to the old file (which indicates that the ...
3
votes
1answer
325 views

Block all internet connections unless connected to OpenVPN server

I want to block all internet connections unless I'm connected to my OpenVPN. Now of course, I need to allow connection to the VPN server. Can this be done, by allowing out/in traffic to/from the VPN ...
3
votes
3answers
2k views

Change default DNS on openvpn connect

I am using Network Manager on Ubuntu 12.10 to connect to an openvpn server. The connection works without problems. However, when I connect, I would like to change my default DNS server to a server ...
3
votes
2answers
4k views

OpenVPN bridge. Can't access machines on local network

Followed this guide: https://wiki.archlinux.org/index.php/OpenVPN_Bridge This is my setup: I have a wireless router(192.168.2.1) which connects to the Internet through a PPPoE connection and acts as ...
3
votes
1answer
56 views

SELinux not allowing read files on ~/.cert

I'm new to Fedora 23 and SELinux. I use an OpenVPN client through NetworkManager. I stored all the files I needed OpenVPN to access (certificate, CA and private key) inside ~/.cert and ran updatecon -...
3
votes
2answers
6k views

Debian 8 Jessie with OpenVPN client

I have a Debian 8 Jessie server that I need to connect to my home network and I'm using an OpenVPN server on a pfSense 2.2 box at home. I have done this fine under older Debian versions, so I'm ...
3
votes
1answer
4k views

Settings when using a bridge

I have a bridge set up between my physical Ethernet interface, eth0, and the virtual interface for OpenVPN, tap0. The bridge has an IP address, and the machine can be contacted on that IP address from ...
3
votes
1answer
6k views

Set up firwall with iptables to only allow VPN

Im using IPredator VPN with openVPN and I want to make sure that if the connection is dropped, i wont submit data from the internet without the VPN. I heard that I could do that with iptables and a ...
3
votes
1answer
421 views

forward vpn traffic to another vpn server

I have set up 2 VPN servers in 2 different locations (A running strongswan as server and openvpn as client; B running openvpn as server), And A and B is linked via openvpn. What I want to do is to ...
3
votes
1answer
2k views

Accessing VirtualBox guest via VPN

I've searched and tried a few suggestions but I haven't been able to get this to work, yet... My host is running Ubuntu. I installed VirtualBox, created a host-only adapter, set the host IP to 192....
3
votes
1answer
1k views

Controlling openvpn auth-user-pass in ifup scripts?

I have the following configured in /etc/network/interfaces: iface companyvpn inet manual openvpn company This allows me to: ifup companyvpn But unfortunately I am unable to provide my ...
3
votes
0answers
87 views

OpenVPN nameservers ignored by NetworkManager or whatever

I'm using Elementary OS. I've followed a dozen suggestions from different websites and nothing helps. I use OpenVPN client to connect to an office network. The company I work for has provided me the ....
3
votes
0answers
939 views

OpenVPN and routing problem on OpenWRT

My home topology: router1 (192.168.1.1) - D-Link dsl2540u server with static IP available from Internet (ADSL via ppoe). 4 LAN ports. router2 (192.168.1.2) - D-Link DIR-300 with OpenWRT. Plays ...
3
votes
1answer
258 views

IPFW Port Forwarding

This is my situation: I want to connect to an OpenVPN server from my office (we're using a proxy, only ports 80 and 443 are allowed). Server IP address is: 176.31.250.232:843 My static IP address is:...
3
votes
0answers
205 views

iCloud stuff stops working while connected to OpenVPN

I have a fairly simple OpenVPN setup on an OpenVZ VPS with Ubuntu 11.10. Client is the Viscosity client on Mac OS X 10.8.2, and after some testing, we can rule out the client as being part of the ...
2
votes
1answer
1k views

Purpose of IP addresses on tun interface?

--ifconfig option, which configures local and peer IP address for point-to-point tunnel interface, is a mandatory configuration option for OpenVPN. However, what is the purpose of local and peer IP ...
2
votes
2answers
3k views

Remote SSH login not working

I have a PC behind a router with port forwarding setup Port 22 for SSH which works perfectly - I can login and everything. What I am trying to do is let this PC connect to a VPN and only allow ...
2
votes
2answers
3k views

Amazon AWS (Amazon AMI) installing OpenVPN

I'm trying to set up OpenVPN on AmazonAWS. I'm pretty new to Linux so I followed a tutorial. I ran yum -y install openvpn and I received a message saying it was successfully installed. The next step ...
2
votes
1answer
570 views

Should OpenVPN point to point tunnels be on different ports?

The OpenVPN cookbook shows an example for site-to-site VPN (3 sites). They configured each tunnel on a unique port: site A to site B: 1194 site A to site C: 1195 site B to site C: 1196 The author ...