New answers tagged vpn
0
votes
Unknown entry in Hosts file (Windows) for geoip.pango-paas.co
geoip.pango-paas.co is a GEO-IP database, provided freely by Pango PaaS. It is based on the MaxMind GeoLite2 database.
As far as I know, Bitdefender does not tell which GEO-IP database it uses. But it ...
- 2,467
1
vote
Accepted
Can reach VPN peer only after ping from this peer
There are two likely explanations:
The firewall at B wasn't configured to allow incoming WireGuard UDP packets through. When the 'Server' sends a packet to B, it's rejected as unrecognized.
Once B ...
- 437k
1
vote
Accepted
Make server not to use VPN as a default gateway
[Peer]
AllowedIPs = 0.0.0.0/0,::/0
The wg-quick tool will install kernel routes corresponding to every peer's AllowedIPs. So the easiest way to avoid having wg-quick install a default route would be ...
- 437k
0
votes
HTTPs + proxy = VPN?
To give a relatively complete answer:
while HTTPS encrypt the data, the visited domain name is sent in clear text to select the SSL certificate used. See Why do HTTPS requests include the host name ...
- 1,074
2
votes
Accepted
HTTPs + proxy = VPN?
So a modern VPN tunnel exists at the interface level, and it protects all connections coming out of that interface. The entirety of those connections is encrypted, until the traffic leaves the VPN ...
- 35.5k
0
votes
0
votes
Accepted
Wireguard on Nginx Proxy Manager and VPS - Correct Routing
32764: from all lookup main suppress_prefixlength 0
32765: not from all fwmark 0xca6c lookup 51820
32766: from all lookup main
First of all you need to understand the meaning of the ip rules here, ...
- 9,573
2
votes
Accepted
Which server & client options are needed to create an OpenVPN "Remote Access" i.e. "Client-to-Site" VPN, without routing all traffic through the VPN?
The summary is "push routes (and other options) you want and don't push routes you don't want", there is really nothing more than that.
To avoid redirecting all traffic, do not push the ...
- 437k
0
votes
Cannot access the private network when connecting through a VPN to my Raspberry Pi
Okay, this is really weird: I restarted my PC and the issue solved itself.
Sorry I can't give a reason of why this happened, if you ran into the same problem as me feel free to comment, maybe we can ...
- 1
0
votes
How to reverse proxy via VPN tunnel?
Can the NGINX server on the remote server have route to my local server
Yes, that's kind of the whole job of the VPN.
when the local server is the machine that does the tunneling?
It isn't; both ...
- 437k
0
votes
No internet connection Ubuntu-WSL while VPN
There was an update to WSL2 in September 2023 with (hopefully) a fix for this issue. Create a file %UserProfile%\.wslconfig with the content below, and then restart wsl. Run wsl.exe --shutdown. I also ...
- 101
0
votes
I want to generate a PSK for VPN
With an SSL VPN, the TLS Crypt PSK is a three-part configuration:
TLS Crypt PSK is generated on the server:
# Generate TLS Crypt key:
openvpn --genkey --secret "/etc/openvpn/tls-crypt.key"...
- 7,448
0
votes
FortiClient VPN Stuck at 98% - Seeking Resolution
I'm currently facing an issue with my FortiClient VPN, where it consistently gets stuck at 98% during the connection process. Despite numerous attempts, I haven't been able to pinpoint the root cause ...
- 42.4k
0
votes
Accepted
How do I use Mullvad's post-quantum safe tunnels with another WireGuard VPN client?
Yes, it is possible using WireGuard’s pre-shared key (PSK) option and Mullvad’s psk-exchange utility. Instructions to setup:
Note: Requires git and a working Rust installation.
Generate a WireGuard ...
- 81
0
votes
"Remote user is disabled" for headless Cisco AnyConnect client
After long hours of trying I finally found a suitable workaround for my situation for Hyper-V.
I enabled PSRemoting on a host from which I want to initialize a Cisco AnyConnect VPN.
I created a file &...
- 136
0
votes
Accepted
Slow download speed when not using ExpressVPN; especially for overseas, especially for single-connection. Upload not affected
In this case the answer was to change ISPs due my original ISP's international routing being a bit crap.
Tangerine Telecom, using the Vocus backend, was not good. I did spend a while with a ticket ...
- 121
0
votes
How to chain two VPNs? (basically tunneling through another tunnel)
To achieve a similar setup without using a virtual machine (VM), you can use a technique called "tunneling through SSH." Here's a step-by-step guide to help you set it up:
Choose a computer ...
0
votes
Have Site-To-Site (IPSEC) connected but cannot ping anything other than router
could you elaborate on this a bit more? What do you mean by default gateway? Was this a software config you set up on a firewall locally or was it an Azure service? I would expect you to mean that you ...
- 101
1
vote
constantly run into ERR_NETWORK_CHANGED error on chrome/mac when switching between vpn and home networks. All the browsers run into this issue
In addition to Sharath's solution, I found out that even if you have the iPhone remotely connected to your Mac (like as a remote device on Xcode for development) it happens. When unpairing the iPhone ...
- 11
0
votes
Establish OpenVPN connection to server behind carrier grade NAT
install ubuntu server on it (if using raspberry pi 4), otherwise debian 10/11 on x86-64.
install openvpnas with the following commands
sudo su
apt update && apt -y install ca-...
0
votes
Circumvent DS-Lite restrictions to allow incoming IPv4 request on single port
I can recommend Rinetd on a VPS for your usecase.
The configuration is also very simple:
/etc/rinetd.conf
(IPv4 of your Server) port/protocol (IPv6 of your Homeserver) port/protocol
for example:
127.0....
0
votes
SSH mysteriously blocked
While I have no direct experience with this issue, a search online finds that this issue is connected to QoS (Quality of Service).
Look at this answer on Server Fault.
As well as this issue report on ...
- 53.7k
1
vote
Accepted
Peer connection issue with Wireguard
Don't put the endpoint IP address in the AllowedIPs setting. AllowedIPs is for the IP addresses/networks you want to access through the WireGuard tunnel; if you put the endpoint IP address in this ...
- 579
1
vote
How to expose a home PC behind CG-NAT using a VPS?
Bumped into this problem and although late to the party thought this would help someone.
A simple way to accomplish this is reverse tunneling as follows:
On Client(Machine with no public ip):
ssh -R ...
0
votes
Re-order or "prioritize" DNS server over Cisco AnyConnect VPN on Mac
I've found this hack works pretty well to "fix" the AnyConnect DNS client config to use my local router (192.168.1.1) as the DNS server:
#!/bin/sh
sudo scutil <<EOF
get State:/Network/...
- 101
0
votes
WireGuard full tunnel blocks Internet access
I realized that at SERVER Side there would be at least a second ethernet interface for forwarding the internet traffic coming from CLIENT.
Top 50 recent answers are included