Hot answers tagged

21

It's not the ssh client that decides through which interface TCP packets should go, it's the kernel. In short, SSH asks the kernel to open a connection to a certain IP address, and the kernel decides which interface is to be used by consulting the routing tables. (The following assumes you're on GNU/Linux; the general concept is the same for all Unices, ...


10

Just found a new solution for this recently that is REALLY neat. Take a look at sshuttle. https://github.com/apenwarr/sshuttle/


10

Yes, there is a Linux (and Windows/Mac) based SSTP (and lot more) VPN Server. It is called SoftEther VPN (http://www.softether.org). I used it on Ubuntu 13.04 release. Best of off, it is free. Granted, there are couple of limitations with the free version (for example, cannot use external authentication, client certificates etc.) In general, it seems to ...


9

You need to do three things on your VPN server (the Linode) to make this work: You must enable IP forwarding: sysctl -w net.ipv4.ip_forward=1 Set up destination NAT (DNAT) to forward the port. You've probably already figured this out because it's standard port forwarding stuff, but for completeness: iptables -t nat -A PREROUTING -d x.x.x.x -p tcp ...


9

No packets are received for several seconds and then ~6 are sent back in quick succession. This is symptomatic of two similar phenomena: network congestion or network discards (usually due to congestion). In the first case, a router between here and there has a burst of traffic unrelated to your activities which cause your traffic to be buffered in ...


8

Do you have ssh as root disabled? Check your sshd configuration (possibly /etc/ssh/sshd_config) and look for the line PermitRootLogin no. Change the no to yes and restart sshd (most likely either service ssh restart or service sshd restart). Some distributions (e.g., Ubuntu) default to without-password for PermitRootLogin such that root login is allowed via ...


7

I found the answer, I had to enable Point-to-Point encryption(MPPE) in the Advanced Settings dialog. Now it works.


6

f your server is running a recent sshd version ( >= 4.3 ) you should be able to use the ssh IP tunneling option "-w" and set up a point-to-point connection. After that it is just a matter of routing. (As your server is only reachable through the network beware to not cut the link when setting the routes. For instance open a new ssh connection to your server ...


5

The EPEL repository has a vpnc package. Generally, EPEL should be the first place you should look for additional packages. The EPEL repository is semi-official, since it is from the Fedora project. Unlike rpmforge, it doesn't contain any packages that already exist in CentOS/RHEL, so you do not need to worry about conflicts. Instructions on setting up the ...


5

/etc/resolv.conf defines how the computer resolves host names (e.g. which, if any, default domain names are searched when you try to resolve a non-FQDN hostname....lookup for a bare www becomes www.yourdomain.example.com), and which name servers are used to do the lookup. One of the reasons, and the most likely, that VPN clients might modify ...


4

From the sound of it, your campus firewall doesn't allow any connection to be initiated from outside the campus to your machine. So in order to connect to your machine you'll have to initiate the connection from the inside. So you'll have to establish some connection between your dorm machine D and some external machine E outside the campus. Then, when you ...


4

Two of the possibilities are: the host you're trying to ssh into only allows connections from certain IP addresses (e.g. addresses on one or more of the university's VLANs). They may not have configured it to recognise VPN addresses as "local". the host is configured to allow password-based auth from certain addresses but requires an ssh key from all ...


4

How do I ensure that my torrent client actually uses this connection? There is a site, CheckMyTorrentIP, that does exactly that. Basically, you download a torrent file generated specifically for you and once you open it in your client it will report the IP address being used. The IP should be displayed directly in your client but you can also revisit the ...


4

Fedora also packages Openswan, which has a free IPsec implementation that you can use for a VPN.


4

I have no experience of PPTP Client and haven't looked at the instructions. But the command route add -net 0.0.0.0/0 ppp0 means “route all traffic through ppp0 except the traffic that has more precise routes”. This means that the loopback interface, your local network if you have one, and the route to the VPN server (which is set up, right?) will use the ...


4

Hamachi isn't meant for that. It's a VPN service/software, not an anonymous browsing helper. You could use Hamachi to tunnel traffic to another machine that runs something like Tor, possibly with an http proxy too or whatever else anonymizing techniques you will. Hamachi itself doesn't provide that. It lets you build a private network, but you have to deal ...


4

You could install a http proxy (like squid) on the client that is accessing this server, and then tunnel traffic back through the ssh connection to the client and then through the proxy. Something like this +----------+ +-----------+ | |+----SSH+-->| | | Client | | Server ...


4

Assuming the VPS runs Linux as well, I'd setup some SSH tunnels from A to B with B acting as a gateway. That way, you could tell B to listen on port 8080 which then corresponds to the IP of IP camera one So from the A box, run ssh with these parameters ssh -nNT -R 8080:ipcam1:<ipcamport> -R 8081:ipcam2:<ipcamport> <VPS IP> Hopefully your ...


4

It not about interface priority. The routing table determines what path your traffic will take. See ip route show and ip route get ipaddress Most VPNs push a default route via themselves. In my OpenVPN setup I've configured it to only push routes to the internal IP space, however that is a server-side option. Your client may offer the option of ignoring ...


4

I cannot say if VPNC will or won't work with Checkpoint, and in the past when I've attempted to use VPNC with Aventail/Nortel it did not work for me, so I reverted to using the native client software that was included by Aventail/Nortel on Fedora/CentOS/Ubuntu systems. I cover some of this at a highlevel on my blog in this article titled: Setting up Aventail ...


4

You must check the routing table. With the route command, you can see how you traffic is routed, if there is a line like default 123.456.78.x is likely that your traffic is redirected on the VPN, however if your public ip is your isp it is very likely that the VPN rotate only traffic headed to work. These lines indicate that the traffic with a destination ...


3

Well, this "I have no root" acces on Server A can be a problem to create a good vpn solution since: ip-ip tunneling requires interface manipulation; pptp also requires root privileges to create interfaces; OpenVPN can even run as unprivileged user, but some tricks need to be done like allowing sudo to the ip command to allow the creation of tun interface; ...


3

Using the configuration file with a GUI If you look at the proxpn script, you will see that the command issued is: openvpn --config $OPENVPN_CONF \ --remote $remote $PORT \ --auth-nocache \ --auth-user-pass $AUTH_CREDS If you want to feed the OpenVPN config file to some other tool (like a GUI or a mobile client), you might need to add those extra ...


3

SSH SOCKS5 Tunnelling using PuTTY: Firstly connect to your server via SSH using PuTTY. Right-click on the top bar and hit 'change settings'. Goto Connection/SSH/tunnels. Source port: 4567, select 'Dynamic' and hit 'Add' Open up your choice of browser, and configure the 'Manual Proxy settings' to listen on port 4567 on localhost (127.0.0.1). In Firefox ...


3

The approach I would recommend is to route all your traffic through the VPN except SSH; this provides much more protection for your privacy and significantly reduces the risk of any personal information leaking. This approach has several separate components. Torrent client rtorrent is an excellent torrent client for running in a headless environment. Run ...


3

What broke the config was providing --user and --password as command line options on the line beginning with pty. The username is already given on the next line and password should be provided in /etc/ppp/chap-secrets. The problem was fixed by changing that line to pty "sstpc --ipparam sstp-1 --nolaunchpppd SERVER_IP" in addition, there is no need to ...


3

I'm using this code (you have to install the expect package first): I've installed forticlientsslvpn_cli in /opt/forticlientsslvpn.  Replace IP_FORTIGATE, PORT_FORTIGATE, VPN_USERNAME, and VPN_PASSWORD with your values. #!/usr/bin/expect -f set force_conservative 0 ; if {$force_conservative} { set send_slow {1 .1} proc send {ignore arg} { ...


3

I had the same problem and could solve it by removing the line "local xxx.xxx.xxx.xxx." out of the server.conf. via


3

You could put a simple cron script together that would monitor to see if the vpnc process is still up. If not, then run it. #!/bin/bash if [ "$(pidof vpnc)" ]; then echo "restart" ..run vpnc here.. else echo "running" ..do nothing.. fi Once you've created this script, call it /etc/cron.d/vpnc_checker.bash and create a crontab entry for it, in ...


3

In the OSX 1.9 pppd source code, I found this in Helpers/pppd/pppd.h: #ifdef __APPLE__ #define EXIT_TERMINAL_FAILED 20 #define EXIT_DEVICE_ERROR 21 #endif #ifdef MAXOCTETS #ifdef __APPLE__ #define EXIT_TRAFFIC_LIMIT 22 #else #define EXIT_TRAFFIC_LIMIT 20 #define EXIT_CNID_AUTH_FAILED 21 #endif #endif #ifdef __APPLE__ #define ...



Only top voted, non community-wiki answers of a minimum length are eligible