Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [openvpn]

OpenVPN is a free virtual private network (VPN) client and daemon.

26
votes
3answers
31k views

How to refuse routes that are PUSHed by OpenVPN server?

When I establish an OpenVPN client connection over the Internet to our corporate OpenVPN server, it pushes several static routes. Unfortunately, these routes break some connectivity within my local ...
24
votes
7answers
83k views

Using OpenVPN with systemd

Ok, so I've been searching the web for solutions to this problem with no answers seeming to work for me. Hopefully someone can help me. I'm only trying to configure the OpenVPN Client. I'm running ...
21
votes
4answers
52k views

Port forward to VPN Client?

I've run into a bit of a puzzle and haven't had much luck finding a solution. Right now I am (sadly) connected to the net via Verizon 3G. They filter all incoming traffic so it is impossible for me to ...
20
votes
1answer
127k views

OpenVPN: Push a route to client with a different gateway

I would like my OpenVPN server to push a route down to the client with a different default gateway. Specifically, my OpenVPN server has an internal IP address of 10.0.0.1, and I would like it to ...
18
votes
2answers
32k views

ssh into a server which is connected to a VPN service

I have a virtual private server, which I would like to run a web server while my server is connected to a VPN service When the VPN connection to my provider is not up, I can do anything I want with ...
15
votes
4answers
7k views

Feed all traffic through OpenVPN for a specific network namespace only

I am trying to set up a VPN (using OpenVPN) such that all of the traffic, and only the traffic, to/from specific processes goes through the VPN; other processes should continue to use the physical ...
14
votes
1answer
29k views

Configuring OpenVPN to use Firewalld instead of iptables on Centos 7

I need to configure OpenVPN on Centos 7 using firewalld. I used iptables on Centos 6.5 and only had to add the following lines to /etc/sysconfig/iptables: -A POSTROUTING -s "10.0.0.0/24" -o "wlan0"...
13
votes
1answer
15k views

Routing public ipv6 traffic through openvpn tunnel

What I'm trying to do is to route IPv6 traffic through a vpn tunnel. That way, I should be able to use IPv6 in a network that doesn't support IPv6. I have a VPS which has an IPv6 block assigned. Part ...
12
votes
5answers
24k views

Ubuntu Server 16.04 - OpenVPN seems not to start, no logs get written

I installed and oepnvpn on an Ubuntu server 16.04 by following the following guideline how-to-set-up-an-openvpn-server-on-ubuntu When I start the openVPN server with: service openvpn start it looks ...
12
votes
4answers
54k views

How to define DNS server in openvpn?

I setup an openvpn server with static key (certificate mode is not usable due to DPI at the national gateway), but I cannot successfully change the DNS automatically after the connection. I searched ...
12
votes
1answer
7k views

Changing OpenVPN device name

I have multiple VPN server software running on the same server, two of them (tinc and openvpn) are using the same /dev/net/tun devices and spawning a tunX iface. The later started ones will use tun ...
12
votes
2answers
17k views

Import VPN config files to NetworkManager from command line

One can import .ovpn files to NetworkManager through GUI tool nm-connection-editor (right click on nm-applet and click on Edit connections): Add -> Import a saved VPN configuration.... My goal is to ...
11
votes
4answers
6k views

port forwarding to application in network namespace with vpn

I was able to set up a network namespace, establish a tunnel with openvpn and start an application that uses this tunnel inside the namespace. So far so good, but this application can be accessed via ...
11
votes
2answers
4k views

1:1 NAT with several identical LANs

I want to connect several LANs located on remote buildings. The "central" site have a Linux computer running OpenVPN. Each remote site also run OpenVPN. the central site has a LAN numbered 192.168.0....
10
votes
2answers
16k views

How to make OpenVPN to listen both TCP and UDP ports

I've searched around and the only thing I've found is that "yes, OpenVPN supports connections over TCP", but I haven't found any way to coerce the openvpn server to listen the same port for both ...
10
votes
1answer
17k views

Use service or systemctl to control openvpn daemon on boot?

I'm working on a debian-based system and am still learning about systemctl vs service, but am trying to use my openvpn configuration as a use-case for working through this. In my current setup, I'm ...
10
votes
3answers
6k views

SSH session through OpenVPN cuts off / locks up after a few lines

I have a large number of identical fanless PCs running debian 6 (ARM). Most of these are connected via comcast and work ok. There are some that are connected to 'WiMax' modems and are having ...
10
votes
1answer
9k views

how to understand the routing table on an OpenVPN client

I just setup the OpenVPN and it is working as expected. However, the routing table of the client is confusing me to no end. Here is the route table: # route -n Kernel IP routing table Destination ...
9
votes
1answer
39k views

OpenVPN - Understand the routing table + How to route only the traffic to a specific ip via the VPN

I'm connecting to a VPN service using OpenVPN and everything works fine. Once I connect these are the rules that automatically are set: root@linux:~# ifconfig eth0 Link encap:Ethernet HWaddr 00:...
8
votes
5answers
28k views

openvpn[]: Options error: In [CMD-LINE]:1: Error opening configuration file

when trying to service openvpn start Oct 12 14:02:01 ccushing1 openvpn[9091]: Options error: In [CMD-LINE]:1: Error opening configuration file: devnet-client-vm.conf running openvpn devnet-client-vm....
8
votes
3answers
10k views

Slow NFS, nfsstat -c: what is authrefrsh (aka newcreds?) field about in detail?

(net-fs/nfs-utils-1.2.3-r1, 2.6.38.5-zen+ Gentoo) Googling this seems to be a complete dead end. man nfsstat says a whole lot of nothing about the subject. The closest I could get was finding out ...
8
votes
3answers
59k views

openvpn WARNING: No server certificate verification method has been enabled

I tried to install openvpn on debian squeez (server) and connect from my fedora 17 as (client). Here is my configuration: server configuration # Server TCP proto tcp port 1194 dev tun # Keys and ...
8
votes
2answers
2k views

OpenVPN, resolvconf, and DNS domain resolution

While at site1, I need to connect to site2 via OpenVPN. Once connected, the OpenVPN site2 pushes a DNS nameserver and domain search options. This causes all name resolutions for site1 to fail. ...
7
votes
1answer
4k views

Where does GNOME Network Manager store passwords?

In Network Manager, under the Identity tab, I can enter a username and password for my OpenVPN connection. I can also enter a password for the "User private key". Both password fields have the ...
7
votes
1answer
18k views

Settings when using a bridge

I have a bridge set up between my physical Ethernet interface, eth0, and the virtual interface for OpenVPN, tap0. The bridge has an IP address, and the machine can be contacted on that IP address from ...
7
votes
1answer
15k views

Uunderstanding tun0 addresses

I have already done some searching and more or less understand what a tun0 interface does. I got the following from various sources, Packets sent by an operating system via a tun/tap device are ...
7
votes
1answer
2k views

Failed to request VPN secrets #3

I am using Arch Linux with Gnome and I want to use openconnect to connect to an VPN server. I can do this at the command-line without a problem, but I can't do this with Gnome; I get the following ...
7
votes
1answer
2k views

SELinux re-labeling problem while attempting to run OpenVPN

I'm trying to run OpenVPN under Fedora 19 with selinux (selinux-policy-targeted) in enforcing mode, and I'm running into an AVC I'm not entirely sure how to handle. Starting OpenVPN from the command ...
7
votes
1answer
258 views

OpenVPN nameservers ignored by NetworkManager or whatever

I'm using Elementary OS. I've followed a dozen suggestions from different websites and nothing helps. I use OpenVPN client to connect to an office network. The company I work for has provided me the ....
6
votes
3answers
25k views

KEY_CONFIG pointing to the wrong version of openssl.cnf

I am trying to setup OpenVPN but I am getting this error: #./build-ca grep: /etc/openvpn/easy-rsa/2.0/openssl.cnf: No such file or directory pkitool: KEY_CONFIG (set by the ./vars script) is pointing ...
6
votes
7answers
60k views

OpenVPN - Socket bind failed on local address [AF_INET] IP:1194: Cannot assign requested address

How get it resolved? I am trying to start the openVPN server so that I can login remotely using username: demo and password: demo, but openVPN server is failing to start. What am I doing wrong? How ...
6
votes
2answers
21k views

Open VPN options error: --tls-auth fails with 'ta.key': no such file or directory

I installed Open VPN and generated .crt and .key files but I could not able to generate ta.key file which gives me options error : --tls-auth fails with ta.key : No such file or directory. How could ...
6
votes
1answer
31k views

How to use --auth-nocache with correct TUN/TAP in openvpn?

I do and get when I have the password file nordvpn.txt of permissions 700 in /etc/openvpn/nordvpn and declaring auth-user-pass nordvpn.txt in .ovpn files root@masi:/etc/openvpn# openvpn --auth-...
6
votes
1answer
11k views

Will the Linux ( red-hat ) Open VPNC Client connect to checkpoint or nortel VPN gateways?

Site: http://www.oucs.ox.ac.uk/network/vpn/linux-solaris/index.xml?ID=VPNC What is open VPNC: VPNC is an open-source VPN client for Linux and other Unix systems which is compatible with the OUCS VPN ...
6
votes
1answer
13k views

Set up firwall with iptables to only allow VPN

I'm using IPredator VPN with openVPN and I want to make sure that if the connection is dropped, I won't submit data from the internet without the VPN. I heard that I could do that with iptables and a ...
6
votes
4answers
5k views

How to make resolvconf append nameservers to the list instead of prepending them?

I'm trying to configure OpenVPN to update DNS-servers as described here. That seems to work, but resolvconf prepends nameservers (and also search domains) to the list of existing nameservers. How can ...
6
votes
1answer
865 views

How to make sure OpenVPN is connected?

I need some sort of "safeguard" for my VPN connection. If the connection drops, the machine shouldn't even reach the internet. (I can reach the machine by other means.) Is it possible somehow? If I ...
6
votes
2answers
2k views

OpenVPN CLI for killswitch or connection fallback prevention

I'm using OpenVPN via command line to connect to my VPN on my current Linux distro since there is no GUI available (which had a killswitch checkbox). My problem is, I can't find any way to add a ...
5
votes
2answers
30k views

iptables forward traffic to vpn tunnel if open

I've used the following guide to set up my raspberry pi as an access point: Raspberry Pi 3 as wifi access point I'm forwarding wlan0 to eth0 and NATing all my traffic. Works great! sudo iptables -t ...
5
votes
1answer
7k views

Purpose of IP addresses on tun interface?

--ifconfig option, which configures local and peer IP address for point-to-point tunnel interface, is a mandatory configuration option for OpenVPN. However, what is the purpose of local and peer IP ...
5
votes
2answers
18k views

Debian 8 Jessie with OpenVPN client

I have a Debian 8 Jessie server that I need to connect to my home network and I'm using an OpenVPN server on a pfSense 2.2 box at home. I have done this fine under older Debian versions, so I'm ...
5
votes
4answers
10k views

How to fix OpenVPN DNS leak

I just subscribed to a VPN provider. I have Xubuntu 17.10, openvpn 2.4.3. After launching the openvpn command I check the IP (fine) and performed a simple DNS leak test: not fine, it shows my ...
5
votes
2answers
13k views

How to install OpenVPN client on RHEL 7.3?

I am using RHEL 7.3 on AWS EC2: $ cat /etc/*-release NAME="Red Hat Enterprise Linux Server" VERSION="7.3 (Maipo)" I would like to install OpenVPN client and was following these directions. I started ...
5
votes
2answers
4k views

NetworkManager fails with “Could not find source connection”

When trying to connect to a VPN using openvpn through NetworkManager, it fails with Apr 17 02:03:17 GAMINGSTATION NetworkManager[1922]: <info> [1523923397.5294] audit: op="connection-...
5
votes
2answers
751 views

How to override dns server in nat gateway (iptables)

I have an Ubuntu server running openvpn, and iptables is used to push all incoming traffic through the vpn server. The IP tables config is very basic, and generated with the following series of ...
5
votes
2answers
3k views

OpenVPN server on Kubernetes cluster / DNS and Service resolution

I have a Kubernetes cluster running applications (currently on a set of Vagrant CoreOS VMs on a local server) I want to be able to debug a particular application locally on my laptop, so I worked on ...
5
votes
1answer
4k views

OpenVPN Client and Server on same machine - Server doesn't allow connections when client is connected

I am new to this community and am hopeful that somebody can help me. Please let me know if I haven't posted all required information. Situation: I have a linux server (raspberry pi, 192.168.1.2) ...
5
votes
3answers
183 views

How to restrict (open)VPN client connection to single system user?

I have a multi-user setup (Ubuntu) (simultaneously logged in users on different TTYs). When I connect to NordVPN from one account using nordvpn connect, all users are now connected to the internet ...
5
votes
1answer
7k views

Run openvpn without root privilegies

I am working with openvpn, when I type: $ sudo openvpn Every is fine, but when I type: $ openvpn bash: openvpn: command not found I try in my Debian 8 with this instructions but in Jessie I can ...
5
votes
1answer
2k views

Debian CLI torrent program through VPN

Has anyone successfully set up a CLI-only (no web UI's!) torrent client that can tunnel all of its traffic through a VPN? (Either by sending all traffic through a particular interface or a SOCKS proxy)...