how can i make openvpn to access my entire office lan network through linux firewall.
how can i allow remote client with (private ip)to access my entire ofice network through linux firewall
I had configured openvpn in my fedora 7. every thing seems ok. created all server,client certificates. and at client laptop i am using win xp. i installed vpn at client laptop n vpn is connected and client got the ip address of the range which i had defined in server.conf.
Now the problem is this that client vpn is connected and got the ip even than client not able to ping local network of my office.guys ur support n guidance needed.
i just one to emulate the windows 2003 - windows XP easy VPN deployment, with my ubuntu server.I got my server side (ubuntu) and client side ( openVPN gui) and everything looks okbut now, i cant make a //server/SHARED and get from my house to the office's docs, despite the conection its ok... whats wrong?
View 14 Replies View RelatedI had installed openvpn in linux machine (public ip) remote pc.. and installed client openvpn in windows xp machine (local network )remote pc... ...how can i accesss openvpn server to access local lan network without performing NATING in firewall.
View 2 Replies View RelatedWe're setting up an OpenVPN access server, a quite straight-forward and very customizable system. Only we have a problem, I guess caused by Apache, when we try to reach the client web server via a custom port (see screenshot in attachement) we get the following error: Code: 501 Not Implemented. The requested method is not implemented by this server. Although we have added on the cisco router a port forwarding for port number 9943. It is working when we access the website : port with the local IP address [URL]...
View 2 Replies View Relatedi have setup Open VPN on Ubuntu 9.04, generated the key and have it running successfully on the server end. I download the open vpn client for windows, copied over the key ca and cert file and connected to the erver. All went well and the open vpn gui said its connected to the server (green comp icon in taskbar) and it said in a ballon it assigned me an ip of 10.8.0.6 it all looks good... BUT i have no vpn access... The virtual adapted in windows is not able to pull an actual IP/gateway and such...
[Code]...
I have a few issues after setting up Openvpn. At work i just setup a new Ubuntu Server 10.4. The server itself is working Great. I ended up getting Openvpn installed and working to a point. I have searched online and done as much reading as i could find but i keep running into the problem of not understanding. So here is the problem.
The server is set on a static IP address. At first i tried to have the config file listen on a virtual ip address i setup up in /etc/network/interface but that ended up not working so i set it to its specific ip address. I kept running into the error about script security while trying to start Openvpn. I tried to add into the config file "script-security 2" that way the up.sh and down.sh scripts were allowed to be run. That didn't help and then i kept trying to run Openvpn manually running the command
Quote:
And i kept getting a message
Quote:
So what i did was just comment out the "up" and "down" scripts in the config file. This allowed me to actually get Openvpn started on the server. So once this was done i connected form a client machine and was given an ip address like i should. The only issue is that i was not able to actually comunicate with the server. I have a samba share on there to allow me to copy files back and forth but an not able to actually communicate with the server at all. I should note that this is a web server that i can view from the outside. (actually get to the webpage) but i tried to access the website and share via the Openvpn gateway. I also tried to access the website portion using the hostname with no luck.
By the way, prior to putting the server on its separate network i was able to access the webpage and the samba share using both the ip address and the hostname.
Code...
What I can ping
Host A -> Host B
Host B -> Host A
Host A -> Router B
Host B -> Router A
Host A -> OpenVPN B
Host B -> OpenVPN A
VPN Server -> VPN Client
VPN Client -> VPN Server
What I can't ping
VPN Server to any client side host local address
VPN Client to any server side host local address
I have searched and searched for this but can not find any answers. Why can I not ping Host B from my OpenVPN server?
i have some problems with configuring openvpn tunnel connection to my openvpn server. I'm using static-key tcp connection. Network manager always said to me that connection could not be established. Also, when i try to run openvpn from terminal, i got some strange permissions problem:
Code:
openvpn --config config.ovpn
Mon Apr 5 15:48:37 2010 OpenVPN 2.1_rc19 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] built on Oct 13 2009
Mon Apr 5 15:48:37 2010 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Apr 5 15:48:37 2010 /usr/sbin/openvpn-vulnkey -q moj.key
[code]....
I need to run a 2nd instance of openvpn on my server so that it can run on udp. The current one runs on tcp and I need to keep that running. Apparently, I need to create a 2nd tun network for it to use - how can I do that? I tried starting a 2nd instance of openvpn but it just seems to hang.
View 1 Replies View RelatedWe have installed "openVPN" from openSUSE 11.2 repo and "openVPN - webmin module" (GUI).What it needs to be done .. "Road Warriors" need to be able to access websites through openSUSE box sitting in the data center, from remote locations (hotel, coffe shops, wi-fi hot spots,..)We're half way there but it gets stucked somewhere with the IP's
View 6 Replies View RelatedI want to configure a VPN over the Internet.I installed the 'openvpn' package, generated the key file, transfered it by a secure way to the client, and setted up the configuration file.
So, in that configuration file I input the IP addresses of the tunneled interfaces. Both IPs are static in the tunnel.
Then, I've heard somewhere that I can assign a dynamic configuration IP for the client. I do this registering a range.
Well, when I tried to change static IP to dynamic IP (changing '192.168.0.2' to '192.168.0.0/24') in the configuration file, the OpenVPN didn't work.
Obviously I don't know what I'm doing, and I really, don't believe that simply changing the IP will make it work, but I tried.
I hope I explained my problem as well.
My configuration file:
# OpenVPN Server Configuration File
dev tun 0
ifconfig 192.168.0.1 192.168.0.2
cd /etc/openvpn
secret key_file
In client I execute the 'openvpn' without the '--daemon' parameter.Then I want that my client uses a IP in a range (192.168.0.0/24, for example), instead of a static IP (192.168.0.2).I also thought to use a DHCP server, but I'm not sure that will work.
I am looking for some advice on how best to lock down our office network to keep our employee's from wasting time on sites like facebook and ...... This will be my first time setting up a server as a gateway in a production environment so I thought I should get some suggestions on what the best packages would be to do this.
I essentially need to lock down our network so that i can monitor what everyone is doing on the Internet and block it if needed. it doesn't have to be web based or have a bunch of gui's, im fine with command line, configs and log files, but it would be nice.
I'm interested in commercial products as well as long as they are linux based.
i need office 2007 to complete school work as openoffice doesnt support access databases. i switched to linux as i didnt have my recovery discs for windows and wanted to start afresh. my problem is that i have got word,excel,powerpoint & publisher working but access just wont load. i click the logo and it does say starting access on the bottom taskbar but then it disapears and nothing happens. ive tried google and havnt really found a answer im running ubuntu 10.10 and i have wine installed This is kind of urgent as i have a deadline fast aproaching and need access at home to progress in work
View 3 Replies View RelatedI setup the hostname for my linux machine to Linux. If I try ping Linux from the same computer it works. If I try from another computer inside my network the host can not be resolved. If I ping the IP from another computer it works.
I take a look in my router at DHCP client list and my linux machine doesn't have the Hostname set up.
How to broadcast the hostname to the entire network?
In others machine I can see GUI option to build a ISO image from a cd. In this FC4 can see the option, how to do command mode?
View 2 Replies View RelatedI got myself a dell laptop from the local computer store. Its a used machine with Windows Vista Home Basic on it. I want to load Ubuntu Desktop 10.10 though so I can do perl development. BUT I want to keep a copy of the entire harddrive with the dell utility partition and Windows Vista in case I want to go back. I was thinking I could image the drive but I not sure what to use, I don't have Ghost or anything, Someone had told me about Clonezilla. Would that work for me? Is it hard to use? Also I want to burn the data to a DVD or something more storable than a harddisk.
View 8 Replies View RelatedI'm running Ubuntu 9.10. I'd really like to make an image of my entire system in the event of a mishap. I've found from experience that anything can happen with Linux and then you're into another reinstall. Anyone know of a good program or process?
View 7 Replies View RelatedI'm running Ubuntu 9.1 server on an PII Compaq. Read an article "Samba: How to share files for your LAN without user/password" [URL] and some others and can see and pull up files, can't change or delete. Here is my smb.conf:
# Sample configuration file for the Samba suite for Debian GNU/Linux.
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options most of which
# are not shown in this example
# Some options that are often worth tuning have been included as
# commented-out examples in this file.
# - When such options are commented with ";", the proposed setting
# differs from the default Samba behaviour
# - When commented with "#", the proposed setting is the default
# behaviour of Samba but the option is considered important
# enough to be mentioned here .....
I am attempting to setup a network to network VPN tunnel between our main office and a temporary location. This location need full VPN access back to the main office's network.Anyhow we have spent about 3 solid days attempting to make this work without any great success. Here is our network scheme for these two devices.
Network A (Main Office) (OpenBSD using isakmpd)
Network: 172.16.8.0/24
External IP: 1.1.1.1 (obviously not the real IP)[code].....
I use openvpn to connect otherwise isolated machines, and use samba to share filesystems across the vpn, which works just fine.But I recently discovered that copying files using rsync -e ssh is so much faster than copying from a mounted filesystem - like about 5 times faster.I've got comp-lzo enabled in both server and the client, at least I think I have, the directive is there in both the server.conf and the client.conf files, but how do I check that it's active?Does anyone know if I can make openvpn behave more like rsync, because copying is easier than rsyncing?
View 8 Replies View RelatedLast time I tried bringing one of my essays to school that I wrote on my ubuntu word processor (open office) microsoft word could not read the file. How would I be able to go about making my document that I wrote on open office readable on microsoft word when I bring it to school or upload it on my schools website.
View 5 Replies View RelatedI have openVPN working with a thirdparty CA, and validating UID entries from the client certificates in LDAP groups. My next step is to figure out OCSP to make sure revoked certificates are denied. I could dump out my CRL as a nightly job, but that of course presents a window where a revoked certificate is still valid. how to dump out client certificate back to pem format? For the ldap check all i was using was the DN, which doesn't really help me for openssl/ocsp
View 5 Replies View RelatedI want to operate my home PC from my office. I'm using fedora 12 installed machine at home. how can i get access for my home PC?
View 1 Replies View RelatedActually i have to make one share folder on linux in such way that user should only read the documents from shared folder and they should not take prints of that folder.could any one telme what server i should use.?samba or nfs?how can i stop client users to stop taking prints from that shared folder.
View 3 Replies View RelatedI have installed a linux server in my office to run 16 machines. Its main use will be a internal mail server but will be also running websites.
I have installed Ubuntu 9.10 server x64 and have got apache running.
I am looking for the simplest more robust solution for smtp, pop3 and imap. I have only ever used qmail before and found it a pain to configure and its getting old so I though I should probably try something new. I have not much experience with running pop3 or imap on linux so would love a suggestion on that.
I have installed LibreOffice (x86) on Ubuntu 10.10 Maverick Meerkat, and it's working great!
I'm just curious if anyone knows a quick way to make LibreOffice the default for all of the appropriate files (doc, odt, xls, ods, etc.)
I searched around in the the LibreOffice>Tools>Options, but I haven't found anything yet. I'm aware that I could right click on a ods file and use the "Open With Other Application" to set a default for that one filetype, but I figured that there's probably a way to completely switch all office file types to Libreoffice.
I'm using Fedora Core 11 and the client OpenVPN on the network-manager into a segmented infrastructure. It works well.
My laptop is on a dmz wireless Zone 192.168.3.0/24 and access Internet through a firewall via a front-end zone 192.168.65.0/24 with wlan0 interface.
But my laptop can access on a back-end zone 192.168.2.0.24 to a server.
When I start the OpenVPN tunnel, I cannot access on my back-end zone because the kernel routing table is modified (all the traffic is routed through the tun vpn interface)
If I define a static route like route add -host 192.168.2.x gw 192.168.3.2 where x is my file serveur, I cannot connect to this server because the routing is make through the tun interface and not by the wlan0 who can access on is gateway
I want to know where changing the kernel routing table file to access on the Internet and on my back-end zone in a same time.
Alright, I've been trying to get this fixed on my own, but I think I am missing a fundamental principle and no amount of scripts or hacks is gonna take place of that. I have adito/OpenVPN installed on my media center. It runs fine and I can access adito in my internal network from other computers just fine. But, the whole point is I want to be able to access it remotely!
Now, I had previously made a run at an external FTP site and failed miserably at that, and I think its all coming down to me not knowing how to configure my own router. I have a Netgear router, I can log into it and under Router status I can get what looks to be my routers external IP address. But if I try to access it at https://XXX.XXX.XXX.XXX:4433 (didn't want to use the default port, 443) I get nothing.
So, my main problems as I understand them are:
1)I need to clear the firewall on my router to allow traffic in/out of my reserved port
2)I need to forward incoming requests on that port to the static internal IP of my media center
3)I really would like a more reliable way to verify the info im getting from my routers admin settings page is actually my external IP, is there a command for this or a website that will tell me?
what is the best way here? I have like 5 servers, and I want my clients to access each of them, so in case 1 server is down, they can access remaining servers. Also, it will work like user1 chooses the server number and is connecting to a central database, then reply is OK, and he can connect to the server number he wished.
View 1 Replies View Related