Questions tagged [openvpn]

OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

OpenVPN is a free and open source software application that implements VPN techniques for creating secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities. It uses SSL/TLS security for encryption and is capable of traversing network address translators and firewalls.

It's architecture is build upon 4 principles:

  • Encryption
  • Authentication
  • Networking
  • Security

More info is to be found on the Open-Source site of VPN.
A very thorough tutorial can be found on Shorewall.

3274 questions
12
votes
2 answers

OpenVPN persist-tun option - what's the point?

According the OpenVPN 2 Cookbook: The persist-tun and persist-key options are used to ensure that the connection comes back up automatically if the underlying network is disrupted. These options are necessary when using user nobody and group…
tenjohn
  • 223
  • 1
  • 2
  • 6
12
votes
1 answer

How to create /dev/tun device inside unprivileged LXC container?

This question is similar to No tun device in lxc guest for openvpn . The LXC has evolved and the unprivileged LXC containers were introduced recently that offer another layer of security against breaking the jail. I need to create an OpenVPN server…
Adam Ryczkowski
  • 720
  • 1
  • 9
  • 29
12
votes
4 answers

Allow OpenVPN client to push it's own DNS servers, regardless of OpenVPN server's pushed dns?

There is an OpenVPN server running on a Debian and it pushes a DNS in the server config file: push "dhcp-option DNS 8.8.8.8" Is there an option to allow the users to change that DNS servers on the client side? Here is the catch, the openvpn server…
Dimi
  • 121
  • 1
  • 1
  • 4
12
votes
1 answer

OpenVPN with mixed ipv4 and ipv6 clients

I have a VPN server handling various clients; some with ipv4 only, some with ipv4 and ipv6, and some that will be ipv6 only. Some of these clients are roaming, so ideally they should connect to ipv6 if it's available, and fall back to ipv4 if it…
Tuinslak
  • 1,465
  • 8
  • 32
  • 56
12
votes
5 answers

Openvpn client, force DNS server

Our Linux Ubuntu configuration does have a DNS server (Bind 9). And resolv.conf has its nameserver 127.0.0.1 When using openvpn client on that Linux, the nameserver is not changed (by the VPN server) but I would like to set it - only during the…
Déjà vu
  • 5,546
  • 9
  • 36
  • 55
12
votes
8 answers

VPN server on Google Compute Engine with OpenVPN

I'm trying to use Google Compute Engine server as VPN server for all my traffic (I'm living in Russia, we have some issues with censorship here). There is mini-tutorial about VPN on GCE, but it's about network between 2 servers inside GCE and not…
OZ_
  • 191
  • 1
  • 3
  • 15
12
votes
1 answer

OpenVPN: self-signed certificate in chain

I am trying very-unsuccessfully to use TunnelBlick (an OS/X OpenVPN 2.2.1 client that is known-good) to connect using certificates. Here is the (sanitized) error message I receive: 2012-01-11 11:18:26 TLS: Initial packet from **.**.**.**:1194,…
user106701
  • 121
  • 1
  • 1
  • 3
12
votes
1 answer

openvpn client: force a host resolution to a given IP

Is it possible on the client side to setup the client.conf file to resolve a particular host/domain to a given IP. For instance, domain.tld resolve usually from the Internet NS to 1.2.3.4 host domain.tld => 1.2.3.4 I would like to force domain.tld…
Déjà vu
  • 5,546
  • 9
  • 36
  • 55
12
votes
5 answers

Can a shell script wait for a file to change and take action?

I wonder if I can write a script that will monitor for a change in a file and execute some action when the change is detected. Detailed explanation: OpenVPN writes its status to a file every 1 minute. I need to parse this status file and take…
davidparks21
  • 928
  • 1
  • 12
  • 27
12
votes
3 answers

Bridging VirtualBox over OpenVPN TAP adapter on Windows

I'm trying to configure a virtual machine (VirtualBox guest running Backtrack 4) with a bridged adapter over a VPN connection. The VPN is is hosted by the cybersecurity club at my university, and connects to a sandboxed LAN designed for penetration…
Sean Edwards
  • 221
  • 1
  • 2
  • 6
11
votes
4 answers

How do I improve OpenVPN reliability over a high latency link?

We are running a OpenVPN VPN over a BGAN satellite link where ping times are about 3 seconds. We use it in a tun configuration, and we're running on Linux (CentOS). It is primarily email that will be sent over the link, but as soon as the mail…
iWerner
  • 211
  • 1
  • 2
  • 5
11
votes
3 answers

Connected to openvpn, but no Internet connection

I have openvpn on a remote server, it's Arch Linux. I'm able to connect to it, but there's no internet after I connect, meaning, when I open a browser and trying to load a website, it's getting stock at "looking up..." No errors on either side. The…
Jodarim255
  • 115
  • 1
  • 1
  • 6
11
votes
3 answers

Changing Windows Network Profile from "DomainAuthenticated" to Public

I have a domain joined Windows Server 2012 R2 box that has the OpenVPN 2.3.13 client software installed on it. When the VPN connection is active the "Ethernet 2" (TAP interface) connection is placed into the Domain Network category alongside the…
James White
  • 674
  • 3
  • 18
  • 32
11
votes
2 answers

How to enable 2-factor auth using Google Authenticator for .ovpn file based openVPN access?

I have an openVPN setup where the users do not have shell accounts on the Debian VM running openVPN. The articles I found while Googling all have instructions of setting up Google Authenticator for a classical *nix user (needing to execute the…
Animesh
  • 249
  • 1
  • 2
  • 9
11
votes
3 answers

How do I connect to an OpenVPN server and dump the certificate chain presented when connecting?

My first thought was to use something like openssl s_client but this only supports TCP not UDP and it seems there requires some special magic to get TLS over UDP working, how do I interface with that and get a dump of the certficate chain presented?…
Shelvacu
  • 373
  • 1
  • 2
  • 15