I'm getting a timeout error from NetworkManager when attempting to connect to my router/firewall.
Excerpt from /var/log/messages attached.
i have added a vpn connection on my Lucid desktop machine, but every time i try and connect, it fails. I also have the same, identical vpn connection on my karmic install on my laptop. everything works perfectly on Karmic, but Lucid is having problems. I have followed identical steps for creating the vpn connection on both machines: vpn connections can be made in 2 ways, the first is through the network manager, but trying to connect through the nm-applet returns an error about vpn failing to connect and "no valid vpn secrets".
I suspect this is at the root of the problem. The only way for my Lucid machine to successfully connect through the command line is if I run the openvpn command under sudo.
I have installed an OpenVPN server on my OpenWrt 10.03 router [freshly flashed]:
[URL]
It seems "ok".
I connect my pc to the lan port of the router, and i want to try it out. I'm using Fedora 14 with GNOME. In the NetworkManager applet i set these things: this and this. Ok!. i try to connect, but it fails. Here are the logs: [URL]
one important thing: my routers [the one with the openvpn server] ip address is 192.168.1.2, and i didn't had to write it nowhere. so how could the networkmanager applet know the ip address of my openvpn server? i think this is the problem, but i just can't find where to write 192.168.1.2
p.s.: yes, i tried to google for: "No server certificate verification method has been enabled." but i didn't find a thing, and i'm trying for hours now... :
p.s.: if i [on the router]:
iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT
[Code]....
Within the documentation of example OpenVPN setups there is a setup that shows an OpenVPN Server with two network interfaces. One interfaces is plugged into the public internet network and the second interface is plugged into the private network.
Normally I assume that it would be best to place the OpenVPN system inside the network behind the router and firewall and open only the ports needed on the router to allow access to the OpenVPN system. All other router ports would be closed. This is the first example they show. To see what I am talking about see page(s) 6-7 here -> [URL]
If one were to use the two interface public facing setup, when would that setup best be justified? I guess if you didn't want to open any ports on the router/firewall then this could be justified but then you have to lock down this public system individually instead of having it protected by the network firewall.
I seem to be having this problem with Fedora 14:
[URL]
My wireless device is an Intel Ultimate N WiFi Link 5300, driver is iwl4965. Post-suspend I see exactly the same messages as in that Ubuntu report. Restarting NM does not help.Is there a way to lengthen to timeout or kick the device in to life some other way?
I am using Witopia VPN services and used to work just fine on my Ubuntu 10.04. All of the sudden it stopped working. Here is the log:
Code:
May 17 00:56:58 saeed-laptop NetworkManager: <info> Starting VPN service 'org.freedesktop.NetworkManager.openvpn'...
May 17 00:56:58 saeed-laptop NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 11477
May 17 00:56:58 saeed-laptop NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.openvpn' just appeared, activating connections
May 17 00:56:58 saeed-laptop NetworkManager: <info> VPN plugin state changed: 1
May 17 00:56:58 saeed-laptop NetworkManager: <info> VPN plugin state changed: 3
May 17 00:56:58 saeed-laptop NetworkManager: <info> VPN connection 'VPN Connection' (Connect) reply received.
May 17 00:56:58 saeed-laptop nm-openvpn[11482]: OpenVPN 2.1.0 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Jan 26 2010
May 17 00:56:58 saeed-laptop nm-openvpn[11482]: WARNING: No server certificate verification method has been enabled. See [URL] for more info.
May 17 00:56:58 saeed-laptop nm-openvpn[11482]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May 17 00:56:58 saeed-laptop nm-openvpn[11482]: WARNING: file '/home/saeed/Documents/config/VPN_Connection.key' is group or others accessible
May 17 00:56:58 saeed-laptop nm-openvpn[11482]: /usr/bin/openssl-vulnkey -q -b 1024 -m <modulus omitted>
May 17 00:56:58 saeed-laptop nm-openvpn[11482]: LZO compression initialized
May 17 00:56:59 saeed-laptop nm-openvpn[11482]: RESOLVE: NOTE: (address omitted) resolves to 12 addresses, choosing one by random
May 17 00:56:59 saeed-laptop nm-openvpn[11482]: UDPv4 link local: [undef]
May 17 00:56:59 saeed-laptop nm-openvpn[11482]: UDPv4 link remote: [AF_INET]IP address omitted
May 17 00:57:39 saeed-laptop NetworkManager: <info> VPN connection 'VPN Connection' (IP Config Get) timeout exceeded.
May 17 00:57:39 saeed-laptop nm-openvpn[11482]: SIGTERM[hard,] received, process exiting
May 17 00:57:39 saeed-laptop NetworkManager: <info> Policy set 'Auto Belkin' (wlan0) as default for routing and DNS.
May 17 00:57:51 saeed-laptop NetworkManager: <debug> [1274043471.002409] ensure_killed(): waiting for vpn service pid 11477 to exit
May 17 00:57:51 saeed-laptop NetworkManager: <debug> [1274043471.002596] ensure_killed(): vpn service pid 11477 cleaned up
I removed IP addresses. I think its a recent update might have created this issue. I tried re-installing openvpn and network-manager-openvpn.
I have a Fedora 14 machine, and I have an OpenVPN CentOS 5.5 server installed and running without issues.I've setup the Fedora machine to connect as a client to the server, and all goes pretty well using NetworkManager.What I'm not able to do is getting NetworkManager to autoconnect to the server upon user login. I have the "Auto Connect" marked, but nothing happens at boot/login.
View 4 Replies View RelatedAs I reported in this bug:[URL].. root is not able to start an openvpn-connection via the "nmcli"-command to control NetworkManager, whereas my user does not run in any problems with this command. My error output when starting as root is as follows:
Code:
# nmcli con up id "my-openvpn"
Active connection state: unknown
Active connection path: /org/freedesktop/NetworkManager/ActiveConnection/5
state: VPN connecting (need authentication) (2)
Error: Connection activation failed: no valid VPN secrets.
Does anybody know what to do about this strange behaviour? The vpn-secret seems to be stored in the gnome-keyring and in the /etc/NetworkManager/system-connections/my-openvpn simultaneously. But root cannot access any of these. Why this is important? I'm trying to set up a dispatcher-script to automatically start openvpn on eth-connection. but this does throw the exact error from above (no valid vpn secrets..).
[Code]...
I got it set up in the NetworkManager applet (imported the client.ovpn), but when I connect it sends ALL my traffic through the VPN. I would prefer all accesses to the internet go over my normal default gateway, rather then all the way through to the VPN's default gateway.When I connect through the command line:
Code:
openvpn --config client.ovpn
I don't have this problem, and accesses to the internet still go over my default gateway on
[code]...
I installed fedora15, My openvpn didn't connect to my working computer.I checked openvpn configure more time, but still don't connect,
View 11 Replies View RelatedI loaded F10 up on my laptop a few nights back. NetworkManager connects via Ethernet just fine. It will also connect wirelessly, but only when security is disabled. I've been using 128-bit WEP.
When I try to connect using security, this is what appears in the log:
Code:
Jan 29 21:07:17 localhost NetworkManager: <info> Activation (wlan0) Stage 1 of 5 (Device Prepare) complete.
Jan 29 21:07:17 localhost NetworkManager: <info> Activation (wlan0) Stage 2 of 5 (Device Configure) starting...
[Code]......
I installed all the necessary packages for the networkmanager-openvpn function to function. The openvpn-connection-setting are successfully imported into the networkmanger via the conf file but the apply button is grayed out, so that actually saving and using the connection isn't possible? Does anyone know, where the problem is? It's a fresh install of Ubuntu 10.10 after the upgrade from 10.04 sent the networkmanger down the drain.
View 2 Replies View RelatedI am trying to set up an ssh server on my Debian squeeze box so that I can access it remotely when I'm not at home. I connect to the internet through an at&t 2wire modem/router. First off, I *can* ssh into the machine from inside the local network, e.g.
[Code]...
Nmap done: 1 IP address (1 host up) scanned in 2.12 seconds Playing around with Nmap, I also found that it only sees port 50001 as open.
After some wonderful days with fedora with my CDMA mobile internet connection (the only connection where I live) NetworkManager can't connect anymore.
I tried to delete the settings and rewrite them without success.
I have A Novatel Ovation U720 CDMA/EDVO USB modem.
I can connect with wnXP and kubuntu, but can't connect with fedora anymore.
I wish to make the definitive move from kubuntu to fedora... but I should wait.
have to connect to it manually every time i log in where i'll get prompted for the root password to connect.
things worked fine on F12.
I have OpenVPN running on my Ubuntu Server just fine. I can connect over the Internet and access all my resources on the LAN via bridged mode perfectly. My server only has one LAN card and sits behind my router, which means it has a private IP address of 10.1.1.2....Which brings me to my question. I want to open up access to my friends via OpenVPN, but I don't want them to be able to access other machines on my LAN (e.g. 10.1.1.20). However, I do want them to be able to talk to each other and pass broadcasts (old LAN games), as well as my laptop (let's say 10.1.1.7).I've tried using iptables to block traffic to the LAN (such as .20), to no avail. I've been reading up and it seems as though iptables won't even filter the traffic, as it's passed at a lower layer. Is this true? If so, what do you recommend I do in order to prevent my buddies from accessing the rest of my LAN while siumultaneously allowing broadcasts pass for some very old Windows LAN games (we're talking Windows 9.
View 2 Replies View RelatedThe auto connect feature of NetworkManager Applet (version 0.7.997) isn't working on my system. If the WiFi connection dies, Network Manager doesn't detect that the connection has been lost and try to reestablish the connection. I have to manually click on the WiFi hotspot to reestablish the connection. This appears to be the case both while the computer is running and when I first boot it up (i.e. when booting, if the first attempt at establishing a WiFi connection doesn't succeed, Network Manager doesn't retry or try another hotspot).Is this "normal" behavior for Network Manager? If not, does anyone know a fix? Here's some more info about my system:
Computer: Dell Inspiron 1318 laptop
WiFi Chip: Broadcomm BCM4238
Kernel Version: 2.6.31.12-174.2.22.fc12.x86_64
[code]....
I have installed opensuse 11.3 I am unable to connect to my wireless connection.
KNetworkManager finds the connection (when i scan for connections), i can enter the WEP Hex key, it says it is configured. Goes through its "check list" when you click "ok", and all seems good. But it won't connect. When i run "nm-tool" i get:
State: unknown
WARNING **: error: could not connect to NetworkManager
I edited values in:
linux-2ys8:/home/sam # vi /var/lib/NetworkManager/NetworkManager.state
to "true"
running rcnetwork restart, output was:
Shutting down network interfaces:
eth0 device: Atheros Communications AR8121/AR8113/AR8114 Gigabit or Fast Ethernet (rev b0)
eth0
[code]....
knetworkmanager(9276): KUniqueApplication: Cannot find the D-Bus session server: "Did not receive a reply. Possible causes include: the remote application did not send a reply, the message bus security policy blocked the reply, the reply timeout expired, or the network connection was broken."
knetworkmanager(9275): KUniqueApplication: Pipe closed unexpectedly.
I have a question. I just bought an internet router which also has wireless connection and my notebook also has wireless LAN.I was able to connect the computer to the internet router very easy. But i dont know how to make it work wirelesss under fedora linux 12...i mean how should i setup the connection to the router so i will be able to have a wireless connection?
View 4 Replies View RelatedI have a desktop PC running Ubuntu 9.10 and Windows 7, and a Eee PC 701 laptop running EasyPeasy Ubuntu 9.04. I'd like to connect the desktop to the laptop with a wired connection (eth0), then the laptop to my ADSL router using wireless (ath0).
I have a crossover ethernet cable (I bought on ebay). I have set up my laptop with a static IP address on my LAN and it uses OpenDNS.
I have added this to /etc/sysctl.conf on the laptop:
net.ipv4.ip_forward=1
Then I tried this on the laptop:
sudo iptables --table nat --append POSTROUTING --out-interface ath0 -j MASQUERADE
sudo iptables --append FORWARD --in-interface eth0 -j ACCEPT
This is a variation on what I found on other sites describing how to set up a router. I don't understand iptables very well, but I gather that the above two lines should set up forwarding so that traffic from my router to the laptop will be forwarded to the desktop, and vice versa.
But this doesn't work. The connection doesn't even establish between the laptop and the desktop.
I want to setup a router with firewall on ubuntu box that will connect windows pcs one serving as outside source and one serving as inside target.
View 2 Replies View RelatedI cannot connect to internet. I just installed Fedora 12 w/ the Live CD and I have a Linksys WMP54G Wireless Card (v4.1 I believe) and it apparently installed fine upon install of fedora. It will not thought connect to the internet. It reads my connect (NETGEAR-2.4-G), my router is a Netgear WNDR3300. It worked perfectly fine on Windows XP. Like I said, it picks up my wireless connection. But when I go to connect it attempts to connect for like a minute or two then goes back to not connected.
View 3 Replies View RelatedI have seen tutorials on setting up a secured firewall/router/gateway using ubuntu server as the platform. However, I am wondering if anyone has had experience with using an aircard (wireless broadband card via usb) to set up a router.
Which card do you recommend? Any precautions? Any specific code already written to automatically recognize mobile broadband cards and restart the connection if it goes stale?
post the "perfect" tutorial for setting up a router and firewall for Ubuntu 10.10 Server 64-bit? I'm kind of a n00b when it comes to Linux, so I get really confused with some things, I have seen things on the ubuntu wiki about this... but it really confuses me =
I'm trying to setup my ubuntu sys as a router and firewall... Internet -> Ubuntu (Router) -> Switch (no DHCP on it) -> Computers I've already setup bind and dhcp3 and got those working perfectly... I've also setup Squid3 and Dansguardian for content filtering (blocking ads and such) and got them working too... I want to set it all up to be transparent, and allow the system itself to function as a powerful firewall router, giving absolutely NO issues to client computers connected, and no speed reduction at all.... I want to setup the firewall to allow all outgoing connections, but block everything incoming (stealth the network)... Forcing all http/s traffic to pass through dansguardian, then to squid...
But am very confused on how to pull this off... The system is running Ubuntu 10.10 Server 64-bit, with 4 GB of RAM, 320 GB SSD, and two 1Gb NIC cards... Sorry if I'm not very clear, I do speak english perfectly, but just kinda new to the "Linux world", I was using SONICWALL but that's getting a little too costly to my network and wanna do a free alternative... Something completely CUSTOM, not using some network security distro.
I want to do is setup a gateway(or router, idk what Ubuntu refers to it as.). So my set up would be Modem>Server>Switch>Router. I know that I need to set up it up as a DHCP server as well. I would also like to setup it up as a firewall too. I already have two Gbit cards that are already configured. So how do I do this? I already tried one tutorial, but it was old and was for Debian. I also installed ebox, but I couldnt figure that out either.
View 2 Replies View RelatedI am looking for a solution for our LAN traffic monitoring and would like to use some opensource linux application. I have a linux box with two NIC cards and what I thought is the following: Our setup is as follows. Internet comes in through the router and into the firewall. From the firewall it goes into our switch and distributed among the workstations.
I have no access to the router or the firewall as they are centrally configured. I would like to place a device into the loop through which I could monitor the LAN traffic.
Can I put a linux box between the firewall and the switch and have all packets going through registered and logged? I have a proxy server (non transparent) and that captures some but not all. I would like to get all packets registered without interfering with the LAN etc.
I am trying to do my graduation project, it's labeled under "linux secure router", and I should build a linux based router equipped with firewall and ACL management...Some people advice me to use linux ubuntu distribution todo this I try to do that but I don't know where to start form
View 3 Replies View RelatedI'm mentoring my local high school's IT club as they prepare to participate in a cyberdefense competition (see IT Olympics). Generally we are given four boxes and need to set up a network that provides certain services (which services change from year to year, but usually include a web server, email server, FTP server, and an application server of some sort) and support client PCs that connect from the WAN. The red team then tries to break into our network to steal "flags" from our servers and to set their own "flags" on our servers.
Generally we set up the firewall with two network interface cards (one to the WAN and one to our LAN), and connect the LAN NIC to a router, which then connects to the other three boxes. But we do have the option of installing additional NICs in the firewall and configuring it as a router. I can't shake the feeling that there is a security advantage to such a configuration, but I can't say what that advantage is. Perhaps something with configuring ipTables on the internal boxes to accept connections only from the firewall's NIC, and then only for the services we want that box to support (to prevent an intruder from connecting directly from one box to another)?
I am trying to make a vnc connection from pc #2 to pc #1. Pc #1 is a debian pc behind a zyxel router (P-2602HW-D1A). Pc #2 is a windows xp pc another place at the internet.I have configured the zyxel router to forward incomming trafic on port 5902 to the local ip-adress of the debian box. The debian box is running a vnc server, listening on port 5902.But i dosn?t work.I have tryed to scan the zyxel routers ipadress on port 5902 from the internet, but the scanner says that the port is closed.The vnc server on pc #1 is working fine on the local network. I can connect to the server from a pc on the same side of the zyxel router.Is it deffenitly a router problem, or could it have something to do with debians own firewall?
View 2 Replies View RelatedCan I use my Nokia N95 to connect my notebook to my home router (I am talking WLAN of course) ?
Tried Googling, but always getting results for sharing 3G/GPRS/EDGE from phone to PC.
I need to get WLAN capabilities on my notebook using N95.