Tag Info

New answers tagged

4

Historically in IPv4, unnumbered interfaces were not possible. The only possible way to configured a point-to-point interface was with a local address and a remote address. The only way to route some other IP address through the point-to-point interface in question was to install a route using the interface's remote address as the gateway (there was no ...


1

Encryption prevents your data from being read. But someone could still modify them; they won't know exactly what changes they're making (due to the encryption), but depending on what you're running over the link, that could be quite catastrophic to the application. Note that traffic analysis (looking at the size and timing of packets) can often give an ...


0

You can use patterns (including shell globs) with systemctl commands. See man systemctl: shell-style globs will be matched against currently loaded units; literal unit names, with or without a suffix, will be treated as in the first case. This means that literal unit names always refer to exactly one unit, but globs may match zero units and this is ...


1

I turned out that I needed to update a second OpenVPN config file to look for auth.dat. Now it works.


1

I've found the problem: my key sizes were way too large. I am now using 2048 bit successfully. Obviously 8192 bits is a bit too much for openvpn


0

Yes, you can use the dev option to specify which device you want to use. You'll also have to add dev-type to specify tun or tap: dev ovpn-tcp dev-type tun Will use a tun device named ovpn-tcp, giving you: $ ip link ls ovpn-tcp 7: ovpn-tcp: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN mode DEFAULT qlen 100 ...


0

You can start the OpenVPN link inside a namespace and then run every command you want to use that OpenVPN link inside the namespace. Details on how to do it (not my work) here: http://www.naju.se/articles/openvpn-netns.html I tried it and it does work; the idea is to provide a custom script to carry out the up and route-up phases of the OpenVPN connection ...


0

ssh works at the application layer whereas a VPN works at the transport or network layer. As a VPN works at the lower layers it can configure routing etc so that your remote computer works as if it were connected to your LAN. A ssh tunnel can't do this at the application layer therefore the remote user has to configure the tunnel manually to listen on a ...


0

I solved it. For other people with the same problem. This article helped me: Forward a TCP port to another IP or port using NAT with Iptables Additionally (as I have no idea if this is enough because of attacks) I followed this: How to block all ports except ... Just to block all remaining ports which might be open which I don´t need. Of course don´t ...



Top 50 recent answers are included