Hot answers tagged

34

This is expected as you are capturing the traffic before it enters the VPN tunnel i.e. before it is encrypted.


7

VPN doesn't affect the security of websites that use HTTPS. Nowadays most of the websites do use it. You can check this by clicking the padlock icon next to the address bar and reading the message that will appear. It should say something like "Connection secure" (exact message and visuals depend on the browser you're using). HTTPS offers full ...


5

For a long time, OpenVPN did not have a real 'tun' interface on Windows. Whenever dev tun was used, it would in fact use the "TAP-Windows" driver and would still create an L2 Ethernet interface even for a L3 tunnel – it would just emulate all L2 things like ARP responses on the client side, even serving fake DHCP to the local machine. However, as ...


3

You don't need to run some other VPN through ssh. you can use ssh AS the VPN. see ssh's "-w X:Y" option. This is a linux-centric answer. Presume a server, we'll call it "hub", to which ssh tunnel clients connect. They will use 172.17.2.0/24 as the VPN "carrier" network. Certain hosts are common and well known, we give them fixed ...


2

On Windows 10, the location is: %APPDATA%\OpenVPN Connect\profiles


2

If you read the docs here you should see the files that are created by Easy RSA. If you overwrite the private key and ca certificate, you should be able to replace the internally generated ones with your own. The files are ca.crt for the CA certificate and private/ca.key for the private key.


2

As we've discussed, the issue is that when you are at your friends house, your local network (the friends) and your remote network (your LAN at home) use the same IP network (192.168.0.0/24). A VPN Tunnel is not magic. At its most basic, they are formed of packets containing an encrypted payload, which is a packet that is passing through the "tunnel&...


2

In IPv4 you also have "subnet-directed broadcast". The last address of an IPv4 network is its broadcast address – from any other network, you can send packets to 192.168.2.255 and they will travel as unicast until they reach the 192.168.2.x network, then the router will convert them to broadcast. Your WoL tool should have an option to specify the ...


2

(Your question body is a little confusing so I will focus on the title.) openVPN for macOS, can I change the tunnel to wireGuard or IpSec? No, you cannot. You must use an OpenVPN client to connect to an OpenVPN server. macOS does not have a OpenVPN client built-in. You must install it manually. If you want a client with GUI support, I suggest looking into ...


2

Security is fine with most any VPN. Privacy? Be careful which VPN provider you decide to use; research their history and their ownership. Encryption via HTTPS even through an VPN connection won’t protect your privacy as far as logs showing how you us the VPN go if that service logs activity and shares it with others. You ask this: “But I am very worried if ...


2

I need to log, but take a look at running Scheduled Tasks on a hardware event similar to superuser.com/questions/219401/… – spikey_richie It worked! In the task scheduler, I made one task that starts the OpenVPN service each time I connect to the internet, and another that stops the service whenever I connect to my home's Wi-Fi network. Task scheduler ...


1

First of all I would add Table=off under [Interface] of the server conf if you use wg-quick to set it up. Then, one of the ways is: ip route add default dev tun0 table 123 ip rule add iif wg0 table 123 This will make all traffics (IIRC that should be forwarded) coming from the wg0 interface look up route table 123 (it can be any unused number) for route, ...


1

The VPN server is just a computer program. Any device that runs an advanced-enough operating system that has available such a utility can run it. This includes principally Linux, Windows and MacOS. The VPN server can only be used in conjunction with matching software on the client computer. This software will usually create on the client a virtual network ...


1

I fixed it. I had a dual stack lite (ds lite) connection and tried to use an online portmapping service which didn't work... Then I called my ISP and they gave me Dual Stack (an ipv4 address and an ipv6 address). Now it works perfectly fine. When I asked this question I didn't know that I had ds lite aswell as what it is. Still thanks to everyone.


1

openvpn.service is mainly a historical leftover. Basically, it imitates /etc/init.d/openvpn for people who were used to older Debian versions having a single service that controls multiple VPN configurations in one shot, whereas the systemd approach is to have a separate "openvpn@foo.sevice" instance for each individual configuration. In other ...


1

Whoever runs the DNS server on 192.168.43.1 configured it that way. By manually bypassing your local mDNS server on 127.0.0.53 you can verify that the result you see in fact comes from the DNS server you have set up your system to use. The query dig @192.168.43.1 medium.com. demonstrates this. If you don't trust your current DNS server, perhaps try to ...


1

I had some issues with the OpenVPN Connect app as well, have you tried to use the openvpn-gui instead? It does not feature such a nice interface, but it works quite well for my needs, it searches the standard directories for profiles, then asks for a username and a password, connects with the server while also showing useful extracts of the connection log, ...


1

So to answer my own question: I didn't find a way to create a keypair on the smartcard directly. But you can import one. And it will be locked in the Virtual Smartcard from that point on (keys will be neverExtract). First create the smartcard (reader) as per the question with tpmvscmgr.exe create /name OpenVPN1 /pin prompt /pinpolicy minlen 4 maxlen 8 /...


1

There are at least a couple of ways of achieving this (probably more). This can either be done on the VPN client side or the server side. If you are likely to have more then connection to the server which requires it, then server side is better. The idea in both cases is the same - You let OpenVPN know the IP addresses that need to be routed through it. ...


1

Technically possible, but not really recommended – in most cases you should instead just get inter-subnet routing working correctly. There are two ways, and which one to use depends on why you want the clients to look "like any other user", as having an IP address is just part of what makes a device be within the same subnet – do you need the ...


1

I have the same setup, linux-vpn-windowsmachine. No workaround should be needed, must be something simple. Start with nmcli command to see if there is a nameserver on the vpn connection. Mine looks like this: VPN myvpnname VPN connection master wlp59s0, VPN, ip4 default inet4 192.168.0.211/24 route4 172.16.1.0/24 route4 0.0.0....


1

You are actually using the NATed option (default), meaning that all clients will be seen as the OpenVPN server itself. You could use the other option which is Routed. In this case, your clients will be assigned IP addresses from a range you define (10.0.11.0/24 from your example). Please make sure this subnet (10.0.11.0/24) doesn't exist on your VPC or OMLY ...


1

It turns out it was not OpenVPN related and was with this SNAT rule: iptables -t nat -A POSTROUTING -s 10.8.0.0/24 ! -d 10.8.0.0/24 -j SNAT --to 129.100.40.167 I updated the live iptables rule and fixed the one in /etc/rc.local so the netmask is /16 instead of /24


1

For installing OpenVPN, use this: https://github.com/Nyr/openvpn-install Then you need to install Squid for HTTP Proxy On Debian 9/10: Upgrade and update before install apt-get upgrade apt-get update Install OpenVPN https://github.com/Nyr/openvpn-install wget https://git.io/vpn -O openvpn-install.sh && bash openvpn-install.sh Upgrade and update ...


1

All credit goes to Erik9261 from https://community.spiceworks.com/topic/2269433-remote-desktop-randomly-freezes-up , you have to scroll down for his answer. You can achieve this via registry (e. g. via cmd, see below) or gpo too. Copy/Paste I've had several clients reporting the same thing. Turns out, it looks like Microsoft made some changes to RDP in ...


1

Got into that situation recently; unfortunately it seems that the project stance is that this ability would be a potentially abusable breach so they won't do it: https://sourceforge.net/p/openvpn/mailman/message/26580749/ One idea was proposed in the same post - to temporarily wind back the clock on the server, which may be counterproductive in general case, ...


1

Just in case somebody else has that issue; for me worked adding myself to nordvpn group: sudo usermod -aG nordvpn <username> newgrp nordvpn From: https://www.reddit.com/r/nordvpn/comments/kfewlb/solution_whoops_cannot_reach_system_daemon_after/ggtiq5t/?utm_source=reddit&utm_medium=web2x&context=3 nordvpnd service was already running.


1

sudo service start nordvpn or sudo systemctl start nordvpn For me none of the above worked, but they were right that a service was needed so I checked all my services after installing nordvpn sudo service --status-all and found nordvpn (no d). I'm assuming they changed the name?


1

This is an answer which I found nowhere, but for another network topology. Posting it in case of someone is searching for this. HOST3 hosts an openvpn client to a vpn provider. What I wanted was that any local host could choose its internet access from the 2 possibilities : normally ( through 192.168.0.254 ) via the VPN connection ( through 10.81.0.1 ) I ...


1

if you are having server-side(Openvpn server) access normally its under /etc/openvpn/server/server.conf or /etc/openvpn/server.conf comment this configuration #######push "redirect-gateway def1 bypass-dhcp" just put your desire website ip address like push "route 96.6.31.216 255.255.255.255" save this file and restart your openvpn ...


Only top voted, non community-wiki answers of a minimum length are eligible