Ubuntu Networking :: OpenVPN Works, But No Traffic?
Aug 31, 2010
I'm facing a problem when I establish VPN connections using OpenVPN to Your Freedom Server. " you can see their documentation here ", I've installed OpenVPN from synaptic and I used the client to connect through VPN and it works !! but there is no traffic in FF or any application !!I tired to insert some HTTP proxy also belongs to the same server and it works. What really wonders me is that OpenVPN seems to work only when I'm connecting to streams sites "e.g. ustream, justin.tv" Is there anyway to force the whole traffic to use OpenVPN " I'm using Mobile modem and it works fine with OpenVPN in win7
I'm using ubuntu server 10.04 with openvpn installed on it. My vpn is working fine, all the users can connect without any issue.My problem is that I'm unable to filter the VPN traffic using openvpn. I can't allow all users to be able to interact with other vpn users. I need to avoid this kind of traffic.I was trying to build an iptables firewall, but I just noticed that my openvpn traffic isn't being filtered by iptables.In FORWARD chain, no matter what rule I use openvpn would continue to allow traffic between my clients. It does appear that openvpn is skipping FORWARD chain?For example:
I have access to a VPN I use when having confidential instant messaging sessions. For the purposes of my work, essentially.I'm a command line kind of guy, and like to use Finch (the shell version of Pidgin) for those.However, when I turn on my OpenVPN connection it routes all traffic through the VPN. Web-browsing, IMing, and I can no longer access other machines on my home network.Can I set OpenVPN to only route traffic I ask through that connection (either by port number or application, or some way I haven't thought of), while other traffic flows through my usual home network?Some kind of local proxy perhaps? Or a dd-wrt box set up as a proxy, connected to OpenVPN?I've played around with the GUI environment too (I have a basic GUI I sometimes use on my main machine) and have installed the full desktop 10.10 on a second machine just to see if I can work it out.
I have installed OpenVPN to use it as an internet gateway butcan't get it to work.OpenVPN installed without any problem. The client can also connect and ping the server but there is no internet traffic.I think it is because of a wrong gateway address which the client gets but I'm not sure. server IP address is 10.8.0.1 and the client can ping this IP but it's default gateway is always 10.8.0.5 which is not accessible from the client.This is my server.conf:
I got it set up in the NetworkManager applet (imported the client.ovpn), but when I connect it sends ALL my traffic through the VPN. I would prefer all accesses to the internet go over my normal default gateway, rather then all the way through to the VPN's default gateway.When I connect through the command line:
Code: openvpn --config client.ovpn I don't have this problem, and accesses to the internet still go over my default gateway on
I have some questions about openVPN. I am wanting to hide my downloading through transmission and I'd like to know if I can use openVPN for this? Also do I need access to a server? I don't understand how it all works.
I'm running OpenVPN service on both debian server and client. When start connection between client and server, I expect all the computer traffic (except ARP and DHCP requests) go through created tunnel. However, when I capture packets on wlan0 on client (the only connection going outside host) using Wireshark, I can see DNS requests visible and sometimes incoming TCP traffic as well, but most of the traffic is going through tunnel as expected. I provide both configurations of client and server and client routing table for inspection. I changed server address to avoid server exploitation in the case of some big configuration mistake.
Commands to run OpenVPN services are: Code: Select allFor client: sudo openvpn --config /etc/openvpn/client.conf & For server: sudo openvpn --config /etc/openvpn/server.conf &
**Client routing table when VPN is OFF** Code: Select allKernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default 192.168.1.1 0.0.0.0 UG 1024 0 0 wlan0 192.168.1.0 * 255.255.255.0 U 0 0 0 wlan0
[code]...
I searched through many forums and documentation and I found, that for all the traffic going via VPN is command: *push "redirect-gateway def1"* neccessary, however, I have leaks despite this command being in place. I already spent over 2 days with this and tried to configure it in many ways, now I have no clue what I'm missing.
This is what is in my /etc/network/interfaces right now.
Code: auto eth0 iface eth0 inet static address 67.202.x.x gateway 67.202.x.1 netmask 255.255.255.0 auto lo iface lo inet loopback My server.conf code....
I can get the VPN server running and everything connects fine from the client. I just don't know how to tunnel all the traffic through the VPS because it involves making the bridge which I'm having trouble with. What exactly am I supposed to put in /etc/network/interfaces?
I have set up an openvpn server on ubuntu via port tcp 443. The server use a public network and almost every ports are blocked (not 443) So when a client connect to the server, if it send traffic needing a blocked port, the connection cannot been etablished of course. So i d like to know if it is possible to redirect all incoming traffic on the server to an other unblocked port (like 443) to bypass firewall.
I dont think openvpn offer this possibility but maybe with linux it is possible..
I have a remote network that I manage consisting of a DLink DFL-210 firewall/router, and behind that a Dell server running openSUSE 11.2 and a collection of Windows XP/Vista/7 computers.
The Linux box is running OpenVPN as a server (that is how I connect to this network) and a client (it connects to a second server - running XP - at a different location).
The DLink router is the DHCP server and provides addresses on the 192.168.51.0/24 network. The OpenVPN server provides the 10.8.51.0/24 address range.
The remote network that the Linux box connects to is 192.168.54.0/24 via the OpenVPN network 10.8.54.0/24.
I have added routes to the DLink router to route all traffic to the 10.8.51.0/24 and 192.168.54.0/24 networks to the Linux box.
With SUSEFirewall turned off, after I have connected via OpenVPN from my remote computer I can ping all active 192.168.51.0/24 addresses. Other computers on the 192.168.51.0/24 network can ping computers on the 192.168.54.0/24 network. But if I turn on SUSEFirewall, neither of these work. However, I can ping 10.8.54.1 from any computer on the 192.168.51.0/24 network.
How can I set up SUSEFirewall to allow these networks to communicate with eachother?
i have some problems with configuring openvpn tunnel connection to my openvpn server. I'm using static-key tcp connection. Network manager always said to me that connection could not be established. Also, when i try to run openvpn from terminal, i got some strange permissions problem:
Code:
openvpn --config config.ovpn Mon Apr 5 15:48:37 2010 OpenVPN 2.1_rc19 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] built on Oct 13 2009 Mon Apr 5 15:48:37 2010 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Mon Apr 5 15:48:37 2010 /usr/sbin/openvpn-vulnkey -q moj.key
I need to set up my centOS computer as a firewall in my home network. Ive got 2 interfaces, eth0 and eth1. I want to allow and forward all traffic on eth0 and block all traffic on eth1 except ssh, ping(icmp) and DNS. How do I do this? Ive tried some editing in /etc/sysconfig/iptables but no luck.
I wanted to tell my server to block all traffic but US only traffic. So i followed this guide:[URL].. Now I know, it's the best way to help prevent hackers/crackers (doesn't matter to me what they are called. I just have to stop them). My server only deals with US clients anyways so might as well just start right there for my server's security before getting into the brute force and injection preventions. So I got it all done compiled everything moved to the proper directory. I then started to setup my iptables. Like so
Recently I notice that when I'm connected to an vpn server (pptpd) and I'm using it as a default gateway my download and upload speed decreases almost to the half of the usual speed. I made a test using iptables in order to count how much GRE packets are generated (except the real traffic itself) in that way:
Code: iptables -I INPUT -p gre -j ACCEPT iptables -I OUTPUT -p gre -j ACCEPT
iptables -I FORWARD -s 172.16.10.101 -j ACCEPT iptables -I FORWARD -d 172.16.10.101 -j ACCEPT The first 2 rules match all GRE packets between the pptpd server and client, and the next rules - the traffic between the server and the client.
When I turn the counters to zero and begin to generate traffic (to browse, to download etc.) I see that the GRE packets are even more than these in the FORWARD chain.
So, my question is first of all is my test correct and is it true that so much gre traffic is being generated during the browsing (it becames clear that the traffic is double than if the pptpd wasn't used as a gateway) and if yes - can that traffic be reduced?
I want to configure a VPN over the Internet.I installed the 'openvpn' package, generated the key file, transfered it by a secure way to the client, and setted up the configuration file.
So, in that configuration file I input the IP addresses of the tunneled interfaces. Both IPs are static in the tunnel.
Then, I've heard somewhere that I can assign a dynamic configuration IP for the client. I do this registering a range.
Well, when I tried to change static IP to dynamic IP (changing '192.168.0.2' to '192.168.0.0/24') in the configuration file, the OpenVPN didn't work.
Obviously I don't know what I'm doing, and I really, don't believe that simply changing the IP will make it work, but I tried.
I hope I explained my problem as well.
My configuration file:
# OpenVPN Server Configuration File dev tun 0 ifconfig 192.168.0.1 192.168.0.2 cd /etc/openvpn secret key_file
In client I execute the 'openvpn' without the '--daemon' parameter.Then I want that my client uses a IP in a range (192.168.0.0/24, for example), instead of a static IP (192.168.0.2).I also thought to use a DHCP server, but I'm not sure that will work.
We have something on our network that is reaking havoc with our content filter. I am trying to track it down, but so far I have been unsuccessful. We have approximately 500 devices in 100+ different locations spread across 9 states. Looking at each computer is not really feasible.
I need a machine that can sit in between our network and our internet connection and graphically monitor in real time and logs how much traffic each device is sending and receiving. It would need to sit inline so it has to have two nics and be able to pass traffic. The machine also needs to be transparent. Reconfiguration of our routers or workstations is not an option.
I have used ethereal and wireshark before. Ethereal may be a viable option, but wireshark seems to provide lots of information, but no practical way to make use of it. how to set up the box to be a transparent device on the network that will allow internet bound traffic to flow (freely)?
I have been trying to set up openVPN on a Virtual Machine running Ubuntu 10.04 with the eventual intention of having a closed VPN in the workspace I'm at, and a bridged internet connection out through the server.My initial process/instinct was to go through Webmin. After a fair bit of tooling around making eys/certificates, I was able to get a response (and that's all it was, really) from my windows machine accessing the VPN server. However, in my attempt to bridge the network, I have lost all internet/networking capabilities from the server.Fortunately I am able to access the server directly from the hardware underneath (i.e. I don't need to SSH in or anything), and so I've been attempting to restore the server's networking back to default. I have returned the /etc/network/interfaces file to it's original state (just the loop, and an eth0 on dhcp) and restarted the networking. A check with ifconfig returns what seems to be a working eth0, and the loop (noting else) however I am unable to ping any outside server. When I do, I am given the message:From XXX.XXX.XXX.XXX icmp_seq=1 Destination Host Unreachable(where of course XXX is my IP address).nother VM on the server is able to access the internet just fine, so it's not the overall server hardware...I guess at this point I'm just trying to take steps back,
We use Openvpn for remote access to the office network. It would be nice to keep this running and automatically connect to the office at all times.Once started, it does this anyway. The problem lies when the user comes into the office. Openvpn connects as usual to the vpn gateway, but this causes weird routing loops.Is there a way to say to Openvpn "Always connect to the gateway unless you are on network 10.10.10.0/24" ?
I am trying to connect to an existing VPN server that I have been using for years now. I am moving my develpment environment over to a Ubuntu box and I must have openvpn working in order to access SVN. It has been a few years since I have been setting up linux boxes. And networking is a soft spot for me. But
The server has been running without problem for a LONG time. A windows computer I have been using connects to it fine and I can access the network on this machine. I am setting up a new computer, but when trying to connect openvpn starts the initialization sequence completes but I cannot ping the network I am trying to connect to.
I use a second VPN connection to connect to an alternative network and it works fine. The difference between these two is that the working vpn connection is a routed IP tunnel and the one that is not working is a bridged connection.
The VPN that is working on this box brings up tun0 while the bridged connection connects but does not bring up a network tun device. The server logs look normal, it just looks like the client is not setting itself up to use the network once connected. (The key/cert pair work find when on a windows box) Just not on this new ubuntu build.
My current client config
Quote:
cert eric@home.crt key eric@home.key client dev tap
[Code]....
The server is using tap, as well as the working windows client uses "dev tap"
It has been a long time since I have been maintaining linux boxes but its coming back slowly.
I have an OpenVPN setup at work, and windows clients are able to connect fine. On my dual-boot system (Windows XP 64-bit and Ubuntu 10.10 64-bit) I'm able to connect on Windows but not Ubuntu. I use the same files for each. The network manager wasn't working, so I'm doing it via the command line right now:
Below is the output (sanitized)
Code:
Does this mean it's connected? If so, I'm not able to ping anything on the remote network, not even the OpenVPN server.
I've seen this issue and it never seems to get resolved maybe this time I can find a fix.I'm currently using ubuntu 11.04 although i've had this issue since 10.04 and 10.10When using openvpn in windows it works perfectly fine but when using openvpn on ubuntu that's a completely different story I import my .ovpn file from clearos it loads the keys just fine but when it tries to connect it say's "no valid vpn secrets"
On clearos it gives you 3 certs and a .ovpn file the file sets it to use password with tls certs but it still comes up with this error, i've been quite stumped and it would be nice to possibly shed some light on this so I can finally get ubuntu to work with openvpn if possible.
I have set up OpenVPN for my connection. I'm using this to connect to the internet from different locations using tunnelling.
Right now I have a few IP's : on eth0 I have IP from my ISP, on eth0:1 I have my own IP.I set up MASQUERADE to eth0 - but in this case when I try to access my restricted resources IP address from ISP is visible. What I want is to use my own IP address from eth0:1 - could somebody help me to build good working redirect entry for that? I want to redirect all connections to that IP assigned on eth0:1... - just to access Internet using my IP.
I had one two many viruses on Windows, so I am here at Ubuntu. 1. I have installed OpenVPN. I need to connect to an AS/400 after hours. 2. I have downloaded the unbuntu version. 3. I have extracted using the package manager. How do I actually run the program? There are no icons or anything generated. I know how to configue VPN, not asking that. Just how to run the program.
I am using Witopia VPN services and used to work just fine on my Ubuntu 10.04. All of the sudden it stopped working. Here is the log:
Code: May 17 00:56:58 saeed-laptop NetworkManager: <info> Starting VPN service 'org.freedesktop.NetworkManager.openvpn'... May 17 00:56:58 saeed-laptop NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 11477 May 17 00:56:58 saeed-laptop NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.openvpn' just appeared, activating connections May 17 00:56:58 saeed-laptop NetworkManager: <info> VPN plugin state changed: 1 May 17 00:56:58 saeed-laptop NetworkManager: <info> VPN plugin state changed: 3 May 17 00:56:58 saeed-laptop NetworkManager: <info> VPN connection 'VPN Connection' (Connect) reply received. May 17 00:56:58 saeed-laptop nm-openvpn[11482]: OpenVPN 2.1.0 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Jan 26 2010 May 17 00:56:58 saeed-laptop nm-openvpn[11482]: WARNING: No server certificate verification method has been enabled. See [URL] for more info. May 17 00:56:58 saeed-laptop nm-openvpn[11482]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts May 17 00:56:58 saeed-laptop nm-openvpn[11482]: WARNING: file '/home/saeed/Documents/config/VPN_Connection.key' is group or others accessible May 17 00:56:58 saeed-laptop nm-openvpn[11482]: /usr/bin/openssl-vulnkey -q -b 1024 -m <modulus omitted> May 17 00:56:58 saeed-laptop nm-openvpn[11482]: LZO compression initialized May 17 00:56:59 saeed-laptop nm-openvpn[11482]: RESOLVE: NOTE: (address omitted) resolves to 12 addresses, choosing one by random May 17 00:56:59 saeed-laptop nm-openvpn[11482]: UDPv4 link local: [undef] May 17 00:56:59 saeed-laptop nm-openvpn[11482]: UDPv4 link remote: [AF_INET]IP address omitted May 17 00:57:39 saeed-laptop NetworkManager: <info> VPN connection 'VPN Connection' (IP Config Get) timeout exceeded. May 17 00:57:39 saeed-laptop nm-openvpn[11482]: SIGTERM[hard,] received, process exiting May 17 00:57:39 saeed-laptop NetworkManager: <info> Policy set 'Auto Belkin' (wlan0) as default for routing and DNS. May 17 00:57:51 saeed-laptop NetworkManager: <debug> [1274043471.002409] ensure_killed(): waiting for vpn service pid 11477 to exit May 17 00:57:51 saeed-laptop NetworkManager: <debug> [1274043471.002596] ensure_killed(): vpn service pid 11477 cleaned up
I removed IP addresses. I think its a recent update might have created this issue. I tried re-installing openvpn and network-manager-openvpn.
New ubuntu desktop user here. I've been working with Ubuntu servers for over 3 yrs, using Windows as clients. I have OpenVPN running on an ubuntu 10.04 server, and it has worked well with Windows OpenVPN clients connecting. I took those same settings and applied them to this new install of Ubuntu 10.04 Desktop, and now openvpn seems to be failing when we get to the routes (I wrestled with the network-manager "secrets" issue for hours, but that works now).
I performed the following: sudo openvpn --config fogbank-ny1.ovpn --all is well, we're connecting/yay then *screech* FAIL--
Code: Sun Jul 18 07:17:14 2010 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,redirect-gateway def1,dhcp-option DNS 10.8.0.1,route 10.8.0.0 255.255.255.0,topology net30,ping 30,ping-restart 600,ifconfig 10.8.0.10 10.8.0.9' Sun Jul 18 07:17:14 2010 OPTIONS IMPORT: timers and/or timeouts modified Sun Jul 18 07:17:14 2010 OPTIONS IMPORT: --ifconfig/up options modified Sun Jul 18 07:17:14 2010 OPTIONS IMPORT: route options modified Sun Jul 18 07:17:14 2010 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Sun Jul 18 07:17:14 2010 ROUTE default_gateway=192.168.10.1 Sun Jul 18 07:17:14 2010 TUN/TAP device tun0 opened Sun Jul 18 07:17:14 2010 TUN/TAP TX queue length set to 100 Sun Jul 18 07:17:14 2010 /sbin/ifconfig tun0 10.8.0.10 pointopoint 10.8.0.9 mtu 1500 Sun Jul 18 07:17:14 2010 /sbin/route add -net <mypublicip> netmask 255.255.255.255 gw 192.168.10.1 Sun Jul 18 07:17:14 2010 /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 10.8.0.9 Sun Jul 18 07:17:14 2010 /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 10.8.0.9 Sun Jul 18 07:17:14 2010 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.9 Sun Jul 18 07:17:14 2010 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.9 SIOCADDRT: File exists Sun Jul 18 07:17:14 2010 ERROR: Linux route add command failed: external program exited with error status: 7 Sun Jul 18 07:17:14 2010 Initialization Sequence Completed
I am using the suggested openvpn routes. If I connect from Windows (actually the .ovpn file is taken directly from the working windows machine).. all is well, routes work fine all traffic is routed thru the VPN -- same way it's worked for over a yar. I assume that this is what is causing networkmanager to fail as well. those logs indicate that it has connected to the vpn, but is probably stopping when it gets to routes.
I have an Ubuntu server that is currently running Ubuntu 8.10. I was thinking of making it a VPN server for my iPhone and also for my laptop whenever I'm outside and need to access internet over insecure wireless networks. Now that part should be easy I found several guides on how to configure OpenVPN server, as well as enabling clients on iPhone, and OSX.
However, the things is that my server is currently a OpenVPN client also, I have a paid tunnel set up to bypass my ISP blocking incoming traffic on various ports. Is it possible to keep this setting but still enabling a VPN server? Essentially causing traffic from my external device to go in through my tunnel to the VPN server, and then out through the external VPN provider.
I configured succesfully openvpn server, but the service won't start at boot !I thought openvpn automatically starts al the *.conf files in the /etc/openvpn folder ?on my personal laptop the service automatically starts all the .conf files in the folder. But on my server with server.conf file it won't start at boot. I have to start the service as root
