OpenVPN is a free virtual private network (VPN) client and daemon.

learn more… | top users | synonyms

10
votes
2answers
11k views

How to refuse routes that are PUSHed by OpenVPN server?

When I establish an OpenVPN client connection over the Internet to our corporate OpenVPN server, it pushes several static routes. Unfortunately, these routes break some connectivity within my local ...
8
votes
4answers
1k views

Feed all traffic through OpenVPN for a specific network namespace only

I am trying to set up a VPN (using OpenVPN) such that all of the traffic, and only the traffic, to/from specific processes goes through the VPN; other processes should continue to use the physical ...
7
votes
2answers
15k views

Port forward to VPN Client?

I've run into a bit of a puzzle and haven't had much luck finding a solution. Right now I am (sadly) connected to the net via Verizon 3G. They filter all incoming traffic so it is impossible for me to ...
7
votes
2answers
946 views

SSH session through OpenVPN cuts off / locks up after a few lines

I have a large number of identical fanless PCs running debian 6 (ARM). Most of these are connected via comcast and work ok. There are some that are connected to 'WiMax' modems and are having ...
7
votes
2answers
2k views

1:1 NAT with several identical LANs

I want to connect several LANs located on remote buildings. The "central" site have a Linux computer running OpenVPN. Each remote site also run OpenVPN. the central site has a LAN numbered ...
7
votes
3answers
5k views

Slow NFS, nfsstat -c: what is authrefrsh (aka newcreds?) field about in detail?

(net-fs/nfs-utils-1.2.3-r1, 2.6.38.5-zen+ Gentoo) Googling this seems to be a complete dead end. man nfsstat says a whole lot of nothing about the subject. The closest I could get was finding out ...
7
votes
1answer
774 views

SELinux re-labeling problem while attempting to run OpenVPN

I'm trying to run OpenVPN under Fedora 19 with selinux (selinux-policy-targeted) in enforcing mode, and I'm running into an AVC I'm not entirely sure how to handle. Starting OpenVPN from the command ...
6
votes
1answer
4k views

Configuring OpenVPN to use Firewalld instead of iptables on Centos 7

I need some help configuring OpenVPN on Centos 7 using firewalld. I used iptables on Centos 6.5 and only had to add the following lines to /etc/sysconfig/iptables: -A POSTROUTING -s "10.0.0.0/24" ...
5
votes
5answers
7k views

Using OpenVPN with systemd

Ok, so I've been searching the web for solutions to this problem with no answers seeming to work for me. Hopefully someone can help me. I'm only trying to configure the OpenVPN Client. I'm running ...
5
votes
1answer
457 views

How to make sure OpenVPN is connected?

I need some sort of "safeguard" for my VPN connection. If the connection drops, the machine shouldn't even reach the internet. (I can reach the machine by other means.) Is it possible somehow? If I ...
5
votes
2answers
3k views

OpenVPN on OpenWrt

I have a step-by-step guide for OpenVPN on an OpenWRT 10.03 router: (wl500gpv2) Needed packages opkg install openvpn_2.1.1-1_brcm-2.4.ipk kmod-tun_2.4.37.9-1_brcm-2.4.ipk ...
5
votes
1answer
705 views

How can I make the eth1 up and always available for remote access, where eth0 will be used for host to host IPSec VPN?

I am running Amazon EC2 instance with Red hat enterprise linux, where I have two network interface. Now: eth0 is currently active having public ip where I am remotely logged in via SSH, to ...
4
votes
1answer
3k views

Routing public ipv6 traffic through openvpn tunnel

What I'm trying to do is to route IPv6 traffic through a vpn tunnel. That way, I should be able to use IPv6 in a network that doesn't support IPv6. I have a VPS which has an IPv6 block assigned. Part ...
4
votes
1answer
537 views

List all DNS Servers, including those pushed by VPN

I want to know which DNS servers are in effect when I run commands like nslookup, dig, host, ping, etc. The general answer is to cat /etc/resolv.conf, or to look at NetworkManager, but that's only ...
4
votes
2answers
512 views

Configuring OpenVPN to share internet

my university is providing OpenVPN to provide public internet IP address for students (for some libraries etc.) - in other words, they are sharing their internet connection via openVPN... I would ...
4
votes
2answers
2k views

Installing OpenVPN to replace Cisco VPN because Cisco will not work with the kernel I am on or downgrade instead?

I had difficulties installing Cisco5.0 VPN on my Ubuntu 10.04 LTS. I asked for assistance in this question: link to previous question. The answer is that this Cisco program will run on only older ...
4
votes
1answer
61 views

Issue installing OpenVPN via apt

Pastebin I wanted to install OpenVPN on my Debian Wheezy server at home, so I could create a tunnel with my phone or tablet from outside my home. We use OpenVPN at work, so I figured it would be easy ...
4
votes
1answer
1k views

How to fix this eth0 and eth1, where traffic going out via eth0 is failing?

I have two public IPs. One's connected to eth0 and one to eth1, from 2 separate routers as complete DMZ towards the LAN IP. I added this following: ip rule add from 10.0.0.108/32 table 1 # outbound ...
4
votes
2answers
588 views

Starting SSH server after VPN starts

I am running an OpenVPN server on Ubuntu 14.04 as well as OpenSSH. I have my SSH server configured to bind to an IP address on my VPN interface. Once my machine boots, binding to that IP fails. ...
4
votes
0answers
478 views

Import VPN config files to NetworkManager from command line

One can import .ovpn files to NetworkManager through GUI tool nm-connection-editor (right click on nm-applet and click on Edit connections): Add -> Import a saved VPN configuration.... My goal is to ...
4
votes
0answers
449 views

Connect to a VPN from a Linux Virtual Machine

I am running an Ubuntu distro inside a VMWare virtual machine with a bridged connection on a Windows 7 host. What I am trying to do is to have the virtual machine connect to a VPN, but I'm not having ...
3
votes
4answers
6k views

Establish openvpn tunnel in bash script

I'm trying to write a script which will establish an openvpn tunnel when the computer boots up. The main problem lies in inputting the pkcs12 password. I realise it's very bad practice to have a ...
3
votes
2answers
2k views

openvpn logrotate

I'm trying to rotate OpenVPNs logfiles every month. The problem seems to be that simply renaming the files doesn't do the trick. The data still gets written to the old file (which indicates that the ...
3
votes
3answers
3k views

openvpn[]: Options error: In [CMD-LINE]:1: Error opening configuration file

when trying to service openvpn start Oct 12 14:02:01 ccushing1 openvpn[9091]: Options error: In [CMD-LINE]:1: Error opening configuration file: devnet-client-vm.conf running openvpn ...
3
votes
1answer
2k views

Settings when using a bridge

I have a bridge set up between my physical Ethernet interface, eth0, and the virtual interface for OpenVPN, tap0. The bridge has an IP address, and the machine can be contacted on that IP address from ...
3
votes
1answer
4k views

Set up firwall with iptables to only allow VPN

Im using IPredator VPN with openVPN and I want to make sure that if the connection is dropped, i wont submit data from the internet without the VPN. I heard that I could do that with iptables and a ...
3
votes
2answers
32k views

openvpn WARNING: No server certificate verification method has been enabled

I tried to install openvpn on debian squeez (server) and connect from my fedora 17 as (client). Here is my configuration: server configuration # Server TCP proto tcp port 1194 dev tun # Keys and ...
3
votes
2answers
3k views

OpenVPN bridge. Can't access machines on local network

Followed this guide: https://wiki.archlinux.org/index.php/OpenVPN_Bridge This is my setup: I have a wireless router(192.168.2.1) which connects to the Internet through a PPPoE connection and acts as ...
3
votes
1answer
60 views

forward vpn traffic to another vpn server

I have set up 2 VPN servers in 2 different locations (A running strongswan as server and openvpn as client; B running openvpn as server), And A and B is linked via openvpn. What I want to do is to ...
3
votes
1answer
1k views

Controlling openvpn auth-user-pass in ifup scripts?

I have the following configured in /etc/network/interfaces: iface companyvpn inet manual openvpn company This allows me to: ifup companyvpn But unfortunately I am unable to provide my ...
3
votes
0answers
69 views

Make systemd reload only single openvpn process and not the whole group

I'm running several openvpn instances on my server with debian stable; as well some clients as a server instance. Right now, when one of these instances fails, systemd seems to kill and restart the ...
3
votes
0answers
652 views

OpenVPN and routing problem on OpenWRT

My home topology: router1 (192.168.1.1) - D-Link dsl2540u server with static IP available from Internet (ADSL via ppoe). 4 LAN ports. router2 (192.168.1.2) - D-Link DIR-300 with OpenWRT. Plays ...
3
votes
1answer
236 views

IPFW Port Forwarding

This is my situation: I want to connect to an OpenVPN server from my office (we're using a proxy, only ports 80 and 443 are allowed). Server IP address is: 176.31.250.232:843 My static IP address ...
3
votes
0answers
194 views

iCloud stuff stops working while connected to OpenVPN

I have a fairly simple OpenVPN setup on an OpenVZ VPS with Ubuntu 11.10. Client is the Viscosity client on Mac OS X 10.8.2, and after some testing, we can rule out the client as being part of the ...
2
votes
1answer
165 views

Purpose of IP addresses on tun interface?

--ifconfig option, which configures local and peer IP address for point-to-point tunnel interface, is a mandatory configuration option for OpenVPN. However, what is the purpose of local and peer IP ...
2
votes
2answers
3k views

Remote SSH login not working

I have a PC behind a router with port forwarding setup Port 22 for SSH which works perfectly - I can login and everything. What I am trying to do is let this PC connect to a VPN and only allow ...
2
votes
1answer
467 views

Should OpenVPN point to point tunnels be on different ports?

The OpenVPN cookbook shows an example for site-to-site VPN (3 sites). They configured each tunnel on a unique port: site A to site B: 1194 site A to site C: 1195 site B to site C: 1196 The author ...
2
votes
2answers
2k views

Amazon AWS (Amazon AMI) installing OpenVPN

I'm trying to set up OpenVPN on AmazonAWS. I'm pretty new to Linux so I followed a tutorial. I ran yum -y install openvpn and I received a message saying it was successfully installed. The next step ...
2
votes
2answers
2k views

How to persist a file in /usr/local in embedded FreeNAS

I have embedded FreeNAS, version 8.2 beta. Now I would like to install openvpn, of course persisting between updates. I have managed to get the program itself persist by using mount -wu / pkg_add ...
2
votes
1answer
1k views

How do I set up a OpenVPN server on pfsense

How do I set up a OpenVPN server on pfsense? I want to be able to VPN in from a labptop when I am on the road. I set up a openvpn server in the openvpn menu. I duplicated that NAT rules for the VPN ...
2
votes
1answer
83 views

OpenVPN static key ip meaning/order?

I'm following this tutorial. What do the IPs mean after the ifconfig here? dev tun0 ifconfig 10.9.8.1 10.9.8.2 secret /etc/openvpn/static.key Can I use external IPs (assuming I'm configuring this ...
2
votes
3answers
55 views

Does a Certificate Authority represent my company or a server?

I am setting up my second OpenVPN server with TLS and so I have a question about CA. Should I create a separate CA for each server or use the same? Why? Both servers will cater to the same network ...
2
votes
3answers
481 views

How to make resolvconf append nameservers to the list instead of prepending them?

I'm trying to configure OpenVPN to update DNS-servers as described here. That seems to work, but resolvconf prepends nameservers (and also search domains) to the list of existing nameservers. How can ...
2
votes
1answer
413 views

SELinux and OpenVPN?

Having Fedora 20 64-bit installed, I have this old problem of conflicting OpenVPN and SELinux. Obviously SELinux prevents openvpn from launching. The OpenVPN has been set through Network Connection ...
2
votes
1answer
4k views

Will the Linux ( red-hat ) Open VPNC Client connect to checkpoint or nortel VPN gateways?

Site: http://www.oucs.ox.ac.uk/network/vpn/linux-solaris/index.xml?ID=VPNC What is open VPNC: VPNC is an open-source VPN client for Linux and other Unix systems which is compatible with the OUCS VPN ...
2
votes
1answer
22k views

OpenVPN: Push a route to client with a different gateway

I would like my OpenVPN server to push a route down to the client with a different default gateway. Specifically, my OpenVPN server has an internal IP address of 10.0.0.1, and I would like it to ...
2
votes
1answer
4k views

Iptables forward with pptp and openvpn

I have OpenVPN and PPTP installed on a VPS. I'm having a few questions that I can't seem to get a firm answer on. I want to install OpenVPN on 1.1.1.1 (eth0, public IP address) and PPTP on 1.1.1.2 ...
2
votes
1answer
5k views

Only routing certain traffic through VPN

I have a central development server, running a VPN server, and a couple clients that need to connect to it. The server is running Apache, but is only accepting local requests (only listening on ...
2
votes
3answers
1k views

Change default DNS on openvpn connect

I am using Network Manager on Ubuntu 12.10 to connect to an openvpn server. The connection works without problems. However, when I connect, I would like to change my default DNS server to a server ...
2
votes
1answer
122 views

Please help me to understand these tun0 addresses

I have already done some searching and more or less understand what a tun0 interface does. I got the following from various sources, Packets sent by an operating system via a tun/tap device are ...